Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: fh6MZ6WVxGCp9GAwSWkNtWimN2gis1WnwFy7v0m0iWA=
Subject key identifier: 48:3C:C1:2C:3C:C0:2D:C4:60:19:6F:B5:F6:58:5E:DE:48:44:A3:DC
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 0198D54E5138A3F2EF38D186909BD5EE8FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: e6hfan4EIXJRgnBl6Qdfb5ilvMy96eKDj4Omimh7g9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:51:38:a3:f2:ef:38:d1:86:90:9b:d5:ee:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=483cc12c3cc02dc460196fb5f6585ede4844a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:91:22:16:97:76:73:78:10:42:10:16:b5:
af:a0:07:73:30:2f:be:21:16:76:f3:cc:86:c3:5b:
a2:0b:4a:ba:49:51:c6:89:e5:b7:34:94:87:7e:a6:
81:b2:f4:aa:0f:79:03:db:31:4c:87:85:79:5f:98:
79:5f:d5:d5:cb:a7:e8:73:48:ec:36:52:c6:f6:22:
3c:00:4d:ad:f1:3a:4f:8d:db:e7:e3:aa:fd:68:da:
31:50:eb:28:73:7f:9e:16:4c:0a:65:d4:1e:35:c8:
14:df:30:41:b1:9c:d1:f5:02:70:0d:3a:31:1d:ce:
66:14:49:ae:f1:a6:74:8f:48:03:48:00:c7:4e:9c:
23:85:bb:9c:17:e7:53:11:26:33:5c:ce:46:80:61:
0f:3d:4e:e8:ce:56:cf:06:56:7d:f5:ee:24:c6:a0:
bc:64:15:46:56:3f:13:ab:e6:0b:68:7f:81:62:1e:
6e:2b:85:84:97:9f:d7:91:87:a9:9c:36:2c:7b:7d:
d2:82:5d:bd:a6:8f:63:a5:98:67:8a:30:a5:f0:52:
93:8c:ae:19:c1:79:b4:a5:4d:9d:c1:31:f2:ca:c3:
bb:e5:1f:e6:62:7a:0e:4e:c4:b5:f4:34:da:eb:b0:
27:81:cf:f4:bf:2c:21:e8:ff:13:ca:e0:d7:73:bb:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:C1:2C:3C:C0:2D:C4:60:19:6F:B5:F6:58:5E:DE:48:44:A3:DC
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:fe:e9:9a:48:fd:58:82:7a:8e:c2:0b:92:ec:81:7a:25:
ca:9d:75:9d:81:a3:54:07:33:82:e5:3f:e2:cd:6c:db:ba:e0:
84:1b:7b:97:7c:4c:44:13:1a:98:44:cf:41:a1:3d:34:04:d6:
c8:7d:74:40:c7:16:27:c8:e6:7b:bb:15:b7:13:e5:0f:f0:c9:
65:56:02:0d:05:96:5e:e2:9b:62:c4:f3:0b:bf:0a:29:89:75:
0c:08:b9:cd:5d:09:a4:60:ee:9e:ec:32:32:0c:77:50:11:ad:
14:40:92:4e:27:c7:79:74:43:9c:f1:3a:23:3b:14:d5:e3:00:
65:9d:ff:00:b1:01:25:c3:6f:c0:2d:40:13:57:62:e3:3b:22:
1b:89:ac:15:5d:52:8d:d7:e1:fc:4a:15:98:c5:bc:0e:42:ab:
75:b9:5b:ba:47:bc:97:aa:a4:a1:9a:5e:7b:0d:39:8f:4b:c3:
db:73:0c:be:18:8a:ef:79:2d:36:7d:cb:c1:5f:4e:e0:24:cf:
e8:ed:57:8a:2c:1e:2d:6f:67:02:11:d0:36:c0:7f:c9:83:c5:
48:92:ba:6a:30:c5:f7:0b:24:64:88:e3:f9:39:d0:7f:e6:7f:
37:3c:4b:c7:2c:9b:17:c9:62:b9:b0:4f:9d:d3:c2:80:c3:e1:
0f:e4:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client