Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: NkNMGC+RQb+st1/iSKTTzD6GW/xMoVW/vdC3ezAuok8=
Subject key identifier: 30:08:10:13:4D:60:7C:26:89:F0:CD:8F:90:DE:18:9F:E2:25:4B:C5
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 0198D54E64B63C40090378238BAC6A4CB851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: lNQ3d/qavFKpxR01W8QnhBDNisP7GUFSJWW+YuBZtLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:64:b6:3c:40:09:03:78:23:8b:ac:6a:4c:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=300810134d607c2689f0cd8f90de189fe2254bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:aa:60:7c:ed:cf:7f:b3:8c:64:1f:37:6c:
1f:4d:0f:50:71:94:f7:e5:9f:da:a6:f3:37:80:c9:
13:10:d3:63:45:4d:fd:d8:c7:f6:5f:0c:0d:91:93:
b5:e5:43:60:d4:84:82:10:f6:d1:26:c7:1f:53:d0:
37:11:a0:8b:7a:91:c1:88:f1:bf:b6:6c:98:75:61:
3b:28:57:e5:28:d6:3b:10:c2:e5:b1:8a:60:c5:9b:
87:a4:6e:7f:31:e7:99:56:16:cb:3d:d9:a8:3b:ff:
6a:cd:cf:fd:11:5a:dc:d0:d5:63:5c:d8:d0:f1:17:
b6:c0:88:83:55:bc:15:de:86:b6:46:30:13:93:a9:
d2:3e:5a:e2:55:76:de:04:2f:a6:71:dc:92:bb:86:
7a:20:03:dc:e5:50:84:57:93:46:73:77:e6:be:b2:
5c:e9:6e:2e:c5:7c:8f:2c:28:65:d8:12:0e:ba:b4:
47:1b:e3:fd:ca:d9:f1:58:d2:e7:4a:9c:62:0b:3a:
1b:e3:12:b5:0a:93:3c:36:fc:8d:ab:02:7a:72:23:
bc:40:97:cf:a6:7d:93:a3:b1:2d:4f:bb:ee:78:fc:
46:5f:9e:a4:24:99:0f:d7:a8:bf:39:f2:d8:7a:70:
9e:e7:42:6e:22:1b:2f:ff:c9:f6:c7:0f:6c:f4:df:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:10:13:4D:60:7C:26:89:F0:CD:8F:90:DE:18:9F:E2:25:4B:C5
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:1d:cc:f8:84:06:71:4f:84:d4:a8:48:a2:86:9c:10:c8:
d5:44:25:76:86:b3:06:60:86:0f:82:a0:7e:df:a1:e7:a4:17:
26:53:c4:ec:e8:29:d4:20:b0:45:17:64:6e:4c:87:b5:06:fb:
55:57:aa:7d:59:23:d0:83:cf:6b:d0:61:20:c7:7b:1b:9b:0b:
18:0b:2e:f5:77:fb:eb:f4:2f:9e:bb:ce:f5:ab:f7:90:28:e6:
d5:78:10:7f:b3:0f:6d:4d:07:b8:85:3a:a3:09:cd:11:41:fc:
f9:a8:52:f0:a0:60:c9:91:9a:97:eb:10:1a:9a:8c:b4:98:63:
64:5d:c8:83:33:d5:8e:c9:62:55:b4:07:c3:04:ef:97:41:e7:
1a:2a:7e:2c:73:05:ab:3a:a2:15:85:5f:b1:4d:aa:87:bc:0f:
c0:8d:09:eb:38:db:03:ff:7c:a3:6e:e1:0a:92:0e:00:14:7c:
5c:b6:bc:a6:60:a5:e7:19:e2:5c:ea:a6:c2:47:03:c1:c1:cb:
3a:4e:fe:7e:3b:64:8f:c6:84:84:87:4c:72:79:65:7c:da:3c:
ea:b5:6a:04:05:a5:37:0e:8e:ec:78:c2:bc:e0:7a:76:df:7c:
49:ce:00:29:46:94:b9:ab:e1:67:b7:35:89:27:03:a7:d1:28:
76:10:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:02 2025 by rpki-client