Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier: nZ06Lta55y4O+OJqIjxx08G7iLWozfowiaDyKnCpfHg=
Subject key identifier: AA:D2:D2:D1:68:EB:97:DD:8D:E4:BE:61:B0:56:EE:A2:4C:6D:4E:F7
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 0198D6986E133F88226768CCDBB1BE03E050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=)
2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: 9I+pT6md1BacV8WcrTQqaQFFMkLktTHixdVPhAaXPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6e:13:3f:88:22:67:68:cc:db:b1:be:03:e0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=aad2d2d168eb97dd8de4be61b056eea24c6d4ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:73:3f:b0:ee:ea:b2:7f:87:76:2b:33:85:
35:dd:c0:64:d0:6e:95:c7:65:c1:84:eb:63:df:ed:
14:a2:57:87:08:f3:95:12:85:3c:3a:4e:a4:88:e6:
c0:84:6e:c4:d3:4e:c2:a0:aa:cd:f9:3b:b6:87:5a:
b2:c7:cb:53:aa:83:32:a5:7b:cd:6b:a2:98:38:b6:
9b:32:a4:86:4b:3a:74:6c:df:49:65:87:40:39:03:
0f:81:42:1d:14:fc:3b:7f:36:1f:4b:20:6a:2f:51:
6d:7e:03:de:b6:7a:05:8c:44:d9:55:a9:04:d8:d3:
3c:33:94:72:11:bd:b5:91:06:04:6e:9b:07:f5:c9:
fc:3f:c5:fc:5b:f0:8e:4a:b8:4f:54:03:21:4f:7b:
4f:4e:b8:91:cb:41:c9:f6:e4:7e:be:74:a0:d8:14:
1c:e4:92:5e:3b:5e:35:b8:6c:52:0c:aa:15:d0:3b:
ad:07:79:6d:80:30:59:8e:3f:6c:a7:40:e4:5b:5d:
80:f9:f5:69:23:3e:37:48:22:a1:59:c7:c0:fd:2c:
51:9e:14:12:74:6b:65:fc:0c:5a:9a:20:68:fb:3c:
8f:21:b5:e0:c0:81:ea:66:c2:49:9b:98:56:93:65:
5d:62:73:68:07:29:90:06:24:7c:cf:2a:51:b7:a3:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:D2:D1:68:EB:97:DD:8D:E4:BE:61:B0:56:EE:A2:4C:6D:4E:F7
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:c7:8a:f9:a9:4e:58:6a:db:db:84:5a:99:de:1b:31:9a:
be:50:fa:69:41:3d:30:66:ef:f1:42:69:d2:9b:6f:ad:5c:a9:
da:aa:25:b8:61:a4:e8:1f:03:97:5a:78:96:e2:25:e5:1c:17:
92:06:9e:00:e3:aa:d9:43:a4:89:71:42:fc:22:00:6c:7d:4d:
1d:ea:84:cb:c2:c4:e6:20:9e:65:c1:90:69:91:38:f6:d2:0c:
ea:21:04:56:03:9a:dc:9b:49:51:99:4d:03:43:6c:b1:d5:c6:
e8:0a:be:4c:e7:f4:95:29:87:2b:be:c1:c3:cd:f2:cb:c8:d2:
c6:88:b4:bd:07:67:f9:ef:8b:74:bf:c4:b0:ba:57:9f:ce:c8:
72:4f:98:e6:4c:a2:d2:61:1b:de:f9:24:83:25:10:e6:04:e7:
a3:c4:d7:ee:cc:ee:9c:0b:0e:65:a8:cc:46:85:dd:38:f2:65:
7b:c6:ca:7f:39:28:a5:29:88:e4:46:32:5d:b4:20:f2:ac:85:
49:16:84:02:08:bc:87:f3:e6:61:d1:a8:2c:04:82:94:c4:26:
5d:92:04:93:5b:81:58:ae:cb:a1:c2:29:61:56:d2:f8:95:56:
ce:01:6a:b0:f4:cb:3a:9e:14:98:49:66:b0:d5:fe:39:d9:01:
0a:05:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:34 2025 by rpki-client