Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: GnomqSNxEdTYuXgLfhJh4KbFyqbwM8ALueKQV8Vp/1I=
Subject key identifier: A7:D3:20:C9:BF:69:04:30:D7:5D:73:49:29:5E:07:05:08:ED:31:DF
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 0198D5BC3E7B6F115B4379C201647D3602D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: lR7z7AMQe17WzRhHMmVrj4oSqRfs4HhdGU2auJ9d6oA=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3e:7b:6f:11:5b:43:79:c2:01:64:7d:36:02:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=a7d320c9bf690430d75d7349295e070508ed31df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:c1:1f:a0:42:72:3f:75:00:30:10:e2:a0:
ff:81:f9:9e:f0:19:c7:4b:b5:2a:41:5d:1b:5c:37:
34:ff:a0:99:65:22:4c:5e:bc:a0:9a:6c:77:fb:29:
54:02:f8:5d:ad:d3:53:a7:6a:ae:6f:31:79:f5:b4:
37:8b:3b:f5:d7:fa:50:02:1d:35:69:9e:d9:c8:de:
2d:f7:33:8b:a2:f6:c9:19:34:22:87:24:19:d1:cd:
c8:f8:ca:f3:56:c0:18:e3:09:85:11:35:5f:6a:8a:
e3:da:34:f6:4d:4d:3f:f2:8d:a8:6c:ee:43:f7:ff:
4d:d4:98:0d:e1:cb:e6:bb:1d:68:9a:7f:ee:b4:38:
90:e8:56:30:5a:3f:5d:91:e0:a4:55:2e:84:20:b5:
f9:3d:10:1b:dd:37:7a:dc:47:70:95:06:1c:a6:cb:
ed:65:96:3a:f8:6a:52:ec:54:89:af:b7:1c:26:0a:
a8:3e:36:bd:63:96:38:75:29:b3:d2:91:ab:9e:b6:
ef:fe:bb:e8:84:ea:90:f9:60:72:73:e8:4b:71:4f:
b2:d1:96:b6:42:ac:ad:be:0a:db:ff:23:53:7b:03:
a1:76:90:99:76:36:65:90:56:39:22:e7:85:49:50:
bd:eb:dd:df:6e:e9:43:f7:e5:56:98:b3:8a:2f:ef:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:20:C9:BF:69:04:30:D7:5D:73:49:29:5E:07:05:08:ED:31:DF
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:32:2a:24:95:91:57:40:8f:05:71:e2:65:b8:b8:0c:fb:fd:
0f:7f:b3:92:e4:5a:f1:ca:bf:6d:84:34:a3:e1:c1:f2:7b:be:
17:2b:31:16:48:35:51:95:e5:62:1c:6e:fa:b0:3a:3d:3b:6e:
b7:c9:ad:c1:ce:21:f0:12:5c:dc:88:24:16:bb:20:6b:2f:7f:
39:e0:aa:ff:04:9a:c1:37:2d:a4:6b:58:2b:c6:d3:f1:2f:c3:
92:1e:f2:d4:8d:d7:b2:c7:7d:4e:ee:4f:62:cd:5b:8b:20:69:
43:67:50:26:64:37:5c:81:37:51:0e:c4:f3:f9:c2:3c:23:ca:
b6:d1:8e:3e:56:b5:02:c3:0a:c2:52:75:2d:86:d6:11:6f:90:
44:3b:54:38:68:61:92:10:85:e9:8f:81:26:24:62:f0:c4:03:
e1:79:2e:c1:06:ab:4d:da:f6:90:22:24:a8:41:ae:83:d8:65:
46:f7:2d:a2:dd:31:40:ff:dd:30:39:71:2e:54:a8:c8:e2:d1:
20:4b:b5:43:69:4e:40:96:f0:6a:9b:3e:4b:21:b6:2c:15:97:
ee:e3:0e:02:01:17:44:53:2e:c4:a0:fb:97:fd:f1:f8:59:95:
65:c1:93:95:8a:d4:3c:b4:30:cd:87:f5:db:13:d0:2a:43:78:
b6:99:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:39 2025 by rpki-client