Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: ff2+yYvi9eARA8f+IXLm4yEXnld8Jr1b6BOr/x6CRtk=
Subject key identifier: C6:F0:C9:93:7E:47:9A:97:C7:FF:2F:DB:EC:03:43:89:6C:B8:A1:A5
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0198D85066D1D0E0D2CA7A98103F4891769E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 19:03:24 +0000
Manifest this update: Sat 23 Aug 2025 19:03:24 +0000
Manifest next update: Sun 24 Aug 2025 19:03:24 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: F7tpsUoKf3aMH3675S5nYgI7F4HKQNIuoRAQlWE5A9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:66:d1:d0:e0:d2:ca:7a:98:10:3f:48:91:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Aug 23 19:03:24 2025 GMT
Not After : Aug 24 19:03:24 2025 GMT
Subject: CN=c6f0c9937e479a97c7ff2fdbec0343896cb8a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:a1:70:d6:b9:fe:b7:15:26:3f:e6:eb:60:
cc:85:26:2a:dd:a3:42:57:0e:99:b9:35:8a:7c:c6:
4f:f5:4c:cb:10:aa:b7:33:74:60:a7:e6:a4:0f:1b:
9d:b8:9f:22:eb:99:23:aa:6f:1e:fe:84:67:4b:c4:
1e:12:17:0a:0a:3f:32:c0:f6:2a:3a:ae:29:45:5d:
46:39:96:4c:9c:1d:1a:f9:fc:3c:e3:fc:00:4e:04:
87:8b:85:3a:23:1c:1f:c1:e5:bc:c1:29:de:9a:b6:
e7:c9:2a:4e:ca:85:8f:44:5f:1f:5c:cd:9f:7f:c2:
bd:01:65:ab:f9:40:1b:e6:96:2e:fc:b0:cb:71:c6:
c6:7e:1d:68:c6:e7:09:94:30:9a:05:ac:87:cc:c5:
21:bb:44:71:a4:f3:ca:00:d2:f3:8c:34:3f:7e:06:
50:5c:f1:89:23:54:eb:74:2f:ce:f1:0e:0f:2c:27:
ab:32:c6:fa:12:30:60:02:e1:85:28:67:82:0d:17:
90:af:1b:b1:70:b2:6a:2c:8c:a1:ed:9a:f2:26:bd:
d3:64:8e:d9:7e:7f:67:a6:75:3c:88:66:5b:04:e6:
63:dd:a6:c2:98:24:ba:63:c5:7d:ff:29:a2:59:59:
f7:16:36:1a:ca:9e:b9:b2:b4:da:44:36:9c:c2:43:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:C9:93:7E:47:9A:97:C7:FF:2F:DB:EC:03:43:89:6C:B8:A1:A5
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:32:da:79:89:36:d6:be:82:46:e9:9c:2e:d0:b3:04:b4:
a0:85:6e:d8:7d:0c:56:7d:cf:69:f4:5f:52:2f:e8:59:08:f5:
23:5b:2b:12:19:7c:f4:45:82:2c:ba:d8:d1:58:7c:26:aa:6b:
c8:37:33:5d:2b:b7:89:1b:60:5d:a2:25:e4:b4:76:f5:91:45:
97:95:d8:23:e5:a8:83:5d:21:e7:10:fd:b5:82:8e:5f:f6:b6:
d3:74:dd:c4:58:1f:ed:8d:12:18:35:d5:1d:4e:41:58:90:19:
32:5b:f0:1d:48:cb:cf:6d:92:83:d7:41:50:ea:dd:5e:43:f0:
7c:3d:c9:43:e7:99:13:82:d8:fd:73:8b:2c:61:84:a9:ee:a4:
71:ea:0b:93:32:63:51:25:21:cb:2d:a9:fe:b0:3b:cc:e8:b0:
62:29:4c:d6:c2:b0:ec:0e:a5:0d:5a:ed:d9:02:d6:35:e3:d1:
36:42:22:5e:fd:66:a8:8a:66:b5:8c:29:0c:48:f3:cf:32:48:
d7:e5:1e:0e:e5:8f:c3:f0:69:10:80:7d:ea:cd:dc:b2:7d:2d:
25:5f:5d:2e:b6:43:48:9c:42:a6:ba:06:1a:fb:39:b3:a3:f9:
9e:f7:de:f4:0a:db:39:b4:bb:02:f0:d7:b3:74:3e:a6:6a:f4:
70:86:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:20:52 2025 by rpki-client