Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: Rskn2+Q1aKnLw5HMPSdkduCJ+czPA6+Q6HYTgdnfGjg=
Subject key identifier: CA:2B:82:5D:7D:63:7C:A9:7D:64:56:46:E7:88:25:CC:6E:EB:23:84
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 0198D5BBC01CD8209030A0652D4574132DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: wLQYLq38C6dNu8EjIb9pNOvn8KiP7QDLgFNm865ntUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:1c:d8:20:90:30:a0:65:2d:45:74:13:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=ca2b825d7d637ca97d645646e78825cc6eeb2384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:b1:3c:bf:76:a7:49:ee:81:27:45:44:52:
ac:6e:b3:df:dc:65:7d:68:39:f2:ad:01:54:62:4c:
02:e2:24:f6:a8:a9:dd:75:94:4f:72:e8:b1:af:a9:
25:43:d7:7a:dc:60:5b:0e:e2:c2:b6:6f:b7:a6:be:
f5:dc:e8:58:77:be:15:91:b4:45:b8:33:e0:29:7a:
fa:e4:ad:2d:c1:f3:dc:5c:7b:2f:1e:79:c3:dc:92:
cf:4b:d3:0e:a9:53:e7:d1:81:ef:14:82:e6:9f:7f:
16:7c:c1:47:06:94:d5:df:6c:2b:63:cc:17:ab:6b:
81:f7:fe:72:b3:ec:a6:3c:89:90:a0:3b:f3:71:79:
32:b6:84:9b:e3:2a:f8:7d:53:fd:78:9c:25:a7:27:
d7:1c:12:2b:58:45:7d:7f:10:65:4a:fe:56:02:e5:
9f:3a:c9:4d:7b:58:82:5c:5b:63:72:f5:f2:b5:18:
9f:c2:7b:b4:f4:27:58:70:8c:8e:2e:4e:8c:fb:09:
4f:aa:f8:33:98:4e:8c:36:0c:e8:ba:1c:cd:b0:be:
6c:15:2c:cc:92:1f:2b:ad:d9:46:1d:db:6f:6a:1b:
44:1b:a9:48:0d:0a:2d:4c:3a:96:a9:1e:d4:c7:40:
2c:fb:5e:a2:61:ba:25:a7:b5:b7:da:0a:ee:db:72:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:82:5D:7D:63:7C:A9:7D:64:56:46:E7:88:25:CC:6E:EB:23:84
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9e:54:3e:3c:02:35:cd:f7:b5:d3:6b:63:0d:58:5f:43:c0:
0c:a0:8c:e3:0f:97:dc:bc:2d:6d:b6:e2:08:2a:ea:4f:b7:0e:
db:c3:a7:aa:3e:76:6d:f7:cd:d9:4a:6e:7a:55:00:8d:81:a3:
5a:46:ff:5b:2a:f2:18:1b:57:02:f6:63:99:5c:31:a0:b2:bc:
65:2d:b0:5a:44:df:e5:19:83:51:b9:c8:80:cf:93:29:a5:9a:
a3:d6:f8:12:f9:9f:c2:ad:ab:b9:e5:45:b4:79:d1:75:de:e4:
dd:0f:14:05:2e:26:35:cd:d0:66:2c:e0:d0:c4:e2:39:43:4b:
84:6b:4b:4d:cf:4d:3a:bf:f3:30:4e:f6:7a:cd:99:eb:d7:be:
86:3a:a2:ea:6d:df:d3:85:8a:45:d4:aa:9e:b3:30:95:f6:d7:
19:fd:15:29:9a:32:22:ba:6e:27:f2:2d:33:38:f9:64:cf:4d:
d2:f2:0d:47:2d:0a:0a:4e:4f:bc:fa:83:34:20:8a:c4:37:98:
b0:a4:51:03:16:46:38:0d:fb:ff:e0:6d:8c:77:46:ab:25:5c:
b4:26:2a:a0:2b:14:80:5f:a8:56:f9:68:20:b6:ae:ef:cf:ed:
d8:76:7f:7d:7a:01:23:8d:c8:0e:dc:47:b9:da:bd:85:55:fd:
e9:c6:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:11 2025 by rpki-client