Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: N6+VFHd1Zj1SlRDpVbAtYGvdKwEDnIjDL7ybhd+O2yA=
Subject key identifier: B5:0F:B4:C7:17:18:88:94:0A:A9:40:F0:9A:C4:FC:44:30:69:F9:92
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 0198D6CD46DEEB5E85BAEFBCD532AE92CD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:33 +0000
Manifest this update: Sat 23 Aug 2025 12:00:33 +0000
Manifest next update: Sun 24 Aug 2025 12:00:33 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: dDN4yhimFgZAkjEFivrBY5zNsYme8G6dlM32Rr/d+Cw=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:46:de:eb:5e:85:ba:ef:bc:d5:32:ae:92:cd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Aug 23 12:00:33 2025 GMT
Not After : Aug 24 12:00:33 2025 GMT
Subject: CN=b50fb4c7171888940aa940f09ac4fc443069f992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:ef:f3:b3:54:53:eb:d3:d8:2f:7c:46:e2:
34:f5:0e:7d:34:da:c4:0f:e0:91:67:8c:26:1a:d6:
3d:4e:a9:7c:d9:bc:05:22:dc:e6:cd:16:c7:e2:ba:
18:cd:45:64:0f:fe:ca:43:8d:23:56:f0:b8:87:31:
7a:08:c3:25:63:c9:df:53:e6:e3:08:39:40:83:d1:
b2:eb:4f:8b:c1:8d:72:b2:31:74:90:f0:57:7c:b2:
a9:93:cb:00:f3:fb:50:3e:92:08:bb:28:12:18:77:
76:39:64:00:08:d7:3c:b8:8a:e7:ba:e0:24:62:44:
30:13:cf:91:25:af:9e:56:dd:ba:4b:a8:24:4c:d5:
56:c5:62:4e:eb:42:0a:db:64:4a:9e:6a:c9:ff:a3:
44:fd:78:e0:65:b6:c1:d7:82:c9:6f:35:e9:54:4d:
bc:1a:c3:d6:7a:ba:65:4f:b3:6c:d7:31:1b:d0:88:
61:38:14:20:a7:18:0a:d6:07:34:73:83:8c:c7:2a:
63:d6:29:de:f3:73:45:24:b4:9d:32:f8:48:e5:6b:
23:86:b8:4c:d4:dd:b3:d5:06:82:89:f5:44:8e:cb:
58:6a:81:a0:db:f3:b7:48:d8:9f:0a:e7:f4:ef:45:
85:14:d4:cc:56:50:8c:35:8b:89:eb:c2:f7:02:ed:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:B4:C7:17:18:88:94:0A:A9:40:F0:9A:C4:FC:44:30:69:F9:92
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b1:a8:36:f9:ca:bb:f8:84:33:48:ee:fe:36:aa:77:73:3d:
02:90:69:a5:e3:a2:9d:c6:f2:26:1d:90:a1:07:b4:ce:b7:b7:
70:1b:2b:11:80:2f:e6:07:04:22:88:31:8e:de:eb:7f:7b:7b:
39:52:09:ca:ed:69:a7:16:64:15:76:09:41:16:0e:b9:a5:83:
d4:cd:6c:ce:b0:98:c2:09:d7:18:2c:ac:37:41:7f:75:95:4f:
4d:5d:eb:51:30:78:c7:72:7c:16:ea:bf:ce:92:ca:6b:84:02:
e3:53:6c:a1:e1:65:59:f9:94:54:2e:68:ce:72:4f:c8:c5:66:
66:69:7c:9c:be:ee:b4:f6:4a:bd:1e:d5:b8:5c:83:0f:14:38:
f6:43:60:6a:45:99:c1:86:8e:88:c5:ec:91:29:b1:d8:00:3d:
bc:c8:e3:a3:1f:25:11:3a:48:35:7d:f6:2c:c2:ee:f2:9e:ea:
88:20:74:77:68:5d:04:81:2b:11:a7:7c:2b:19:1d:c7:4e:e2:
a3:2e:4e:be:2c:bd:5a:a5:1c:16:d2:51:b0:ec:11:0a:3b:9b:
67:dc:f7:b7:28:25:c2:c7:58:66:16:3a:f2:52:35:d3:af:e4:
bb:e8:48:ec:f4:51:db:18:b5:53:2d:d7:fa:92:16:98:56:ff:
af:33:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:55:03 2025 by rpki-client