Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: SQ4/vHiK6mimcWujtgi5AY/npk1PNyylm8rrWFTSAsE=
Subject key identifier: 43:03:8F:EF:6E:3C:BE:1E:45:19:85:10:2D:76:BB:73:6B:EA:24:23
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 0198D54DE57EF0FEABC447C0189F3ED8693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: mpDwg75JjXJqC3dg0ucYhstSZt65hY46typv56dh5oM=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e5:7e:f0:fe:ab:c4:47:c0:18:9f:3e:d8:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=43038fef6e3cbe1e451985102d76bb736bea2423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:ab:4f:d8:dd:b9:b0:a5:1a:35:6d:e0:ce:
a0:7e:c6:75:6a:54:62:30:be:56:ce:a5:81:df:bb:
55:6b:7f:c7:54:bf:4b:67:b4:92:24:e8:8e:bb:8e:
2e:b2:96:5f:dd:13:e1:43:b8:2d:06:5e:d3:59:39:
61:c4:cc:0d:a5:2b:30:c6:b3:cb:63:66:67:25:11:
6a:37:ab:85:d0:88:01:1f:5c:39:1e:ed:0f:3f:2e:
45:7a:05:16:1a:e7:b0:98:ac:ee:4c:41:a3:3d:62:
0d:f0:b7:77:0b:56:cc:45:b5:5e:2e:ac:d3:c4:e8:
fa:1a:82:af:62:2d:af:41:e7:88:76:3b:e0:36:ae:
7f:aa:70:f7:10:98:18:87:a1:c4:6f:61:bd:95:e8:
6b:35:5c:48:b4:ff:68:a2:11:00:a3:b1:66:b5:8d:
bd:31:cb:66:d8:be:30:41:b2:cf:e1:9b:76:98:e1:
32:ac:c8:fe:a2:7f:77:00:b2:aa:b2:33:f3:c7:60:
f7:65:6c:ed:7a:d9:ff:b8:a7:40:31:3c:56:72:f9:
38:18:49:d3:48:b5:a9:7f:6c:47:7d:05:39:2e:0f:
a1:55:3d:a1:51:b6:23:24:cb:9d:92:92:ab:7d:6a:
5d:2c:eb:48:e1:c6:40:4c:6a:2f:2d:98:f5:b3:17:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:8F:EF:6E:3C:BE:1E:45:19:85:10:2D:76:BB:73:6B:EA:24:23
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:f5:98:ba:ce:d6:72:21:6f:8f:9a:3d:9e:f3:5d:38:e4:
82:6a:25:a9:25:dd:a4:78:52:44:26:21:c8:be:e9:92:6e:fd:
fa:2d:60:fa:9b:33:85:43:e3:5d:aa:88:29:43:a2:92:4c:75:
db:27:55:92:a6:69:8b:a7:7c:ef:cc:4a:d0:cd:ee:5d:d5:10:
50:0a:3b:12:12:51:51:c8:82:56:5b:1d:7b:98:4e:89:e8:12:
c1:5e:81:ae:e8:c0:73:3f:f5:7e:a1:3a:fa:50:d7:e1:fc:68:
53:af:8b:19:7a:3c:c4:86:d9:9c:e8:e8:2b:a9:9b:ad:61:f5:
48:0c:04:d9:61:97:95:e2:ea:78:02:69:92:dd:cc:a0:3a:ad:
12:2b:ab:d1:ea:42:75:5a:c0:b7:a4:3d:46:67:79:51:8c:ba:
01:88:cd:29:d3:19:0b:f5:13:6e:53:a5:68:92:80:f9:42:b5:
02:ab:b4:16:0c:ff:55:87:22:98:d5:66:41:30:ae:78:cd:8e:
2e:a4:4d:f0:4f:f1:a5:bb:87:e6:1b:86:02:ee:20:f8:1f:97:
31:f8:a9:a6:3c:5d:d7:4a:23:e5:8d:37:d8:37:8f:2b:44:3d:
5c:4b:55:40:60:86:ba:80:eb:91:cf:f7:19:2e:35:e5:18:85:
eb:bc:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:19 2025 by rpki-client