Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: H+GP8XcuG0D0r438TTj1Dk4Y2tW98S9iYZUzlzTw+0M=
Subject key identifier: 32:02:0B:0A:8A:67:8F:33:ED:98:D1:A0:E6:60:BD:D6:FC:5E:7E:CB
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 0198D4E0D2DC9FA7D8902CFE94B9BABFFEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: 0iqloixE13HlymHGziaZoUgKMhiU/A0in7U78LLBjXk=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d2:dc:9f:a7:d8:90:2c:fe:94:b9:ba:bf:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=32020b0a8a678f33ed98d1a0e660bdd6fc5e7ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:cb:2a:73:c0:82:cc:74:3a:13:ea:1c:d5:
9d:3f:83:fa:a0:02:ca:b1:46:75:73:49:34:75:ff:
26:65:d5:ca:3f:2d:a5:a1:eb:2d:a7:ea:31:97:23:
74:94:c1:ae:62:7e:fa:82:54:00:3a:ab:45:29:0e:
bf:03:8d:3e:1b:2d:5e:c8:1b:0b:93:0e:0e:47:f5:
ad:79:96:2b:53:63:8a:42:a3:3b:b1:9d:34:dc:f7:
c4:c2:d4:c9:dc:90:e6:34:44:cf:4c:a7:ae:f1:5f:
70:71:64:d1:8c:20:b2:74:53:fa:fc:6b:e6:1a:75:
75:0a:aa:95:18:df:eb:70:a9:01:38:66:d6:b1:ce:
00:79:1a:61:5b:19:26:3c:08:c9:22:7a:9f:12:2e:
92:0d:a5:b6:f7:b3:01:d7:6c:f4:1d:63:36:ca:79:
f6:a5:5f:57:27:b3:7d:8a:89:28:3f:ac:92:b3:c0:
1b:9f:50:12:2c:0e:7a:19:02:08:52:72:1f:40:a7:
77:7f:62:eb:aa:02:35:93:05:0e:c7:92:de:22:28:
c7:7b:03:ee:ed:53:53:d6:c4:e5:ec:0f:c1:ea:73:
ee:9e:ca:0b:80:a9:cc:cd:17:54:91:47:70:af:15:
3c:c1:f6:db:58:09:5c:24:a8:bf:f8:b2:37:ae:20:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:0B:0A:8A:67:8F:33:ED:98:D1:A0:E6:60:BD:D6:FC:5E:7E:CB
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0b:a0:a3:eb:4d:60:5d:1e:07:52:4c:b0:16:31:df:cd:04:
a8:da:d2:3d:76:91:0e:ca:30:58:c8:24:26:d1:09:b4:34:13:
c6:c2:0b:29:09:27:c8:27:98:4e:40:f3:89:a9:67:e5:c9:49:
cf:da:60:74:5d:dc:18:95:16:94:d6:be:c7:d5:75:b6:6f:40:
a1:28:1a:ea:ea:58:57:8e:cb:47:9f:60:fc:80:55:ab:43:0b:
16:4c:d7:08:e5:fc:21:f7:fe:d9:7f:1f:92:16:06:51:5f:d0:
14:2f:f1:75:90:aa:e6:33:39:e5:c4:dd:f9:ce:27:54:9b:c9:
7a:4b:c8:2b:16:d6:ea:ed:01:ed:f5:dd:c5:4d:47:4d:d3:ac:
cd:7c:4e:91:59:f6:14:63:35:d1:f8:b7:c3:bd:8b:d9:e6:d0:
8c:a9:ff:32:8b:01:48:59:5f:b3:16:0b:88:09:b2:66:0e:a6:
e8:b8:3e:07:29:6f:11:75:7c:0a:b8:05:c7:93:7b:7d:42:50:
c2:63:e6:f9:f6:a2:f7:03:f4:0e:2b:43:7f:f7:60:5c:f7:ea:
3b:32:10:6f:98:31:e1:56:fe:55:fc:03:98:3d:02:dc:6b:2f:
bc:f0:66:25:4c:21:c1:8b:39:74:5a:92:ea:f6:af:41:4d:06:
4c:f2:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client