Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: +nDB9zUP3Fha9WYiOKeGwtHj36JuakrMYMXp3OsVkWw=
Subject key identifier: 9B:91:EB:24:29:92:C0:3D:E9:8A:07:F2:5C:D0:BE:70:EA:09:A6:3F
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 0198D472650A7CEB35F520B78F7820A31749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: s9IDPZjXbrNOVdk6MIgZgXgychT7gcMgTOR2ieSy0PI=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:65:0a:7c:eb:35:f5:20:b7:8f:78:20:a3:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=9b91eb242992c03de98a07f25cd0be70ea09a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:70:fb:fb:3b:6a:31:56:33:d9:7a:26:6a:
69:4a:4d:ca:df:de:c3:91:05:5f:4c:2c:bf:90:53:
70:0c:34:6e:11:da:56:92:9d:b7:5c:b3:a9:49:4d:
2b:be:90:49:18:2a:6b:fd:48:2f:01:6e:c6:5a:7c:
ad:51:14:5b:b7:87:d3:bb:10:c3:53:6d:4f:f9:6c:
04:f6:95:0c:57:b6:37:0a:cc:65:a7:14:03:82:c5:
ff:6f:9c:46:a1:9c:13:52:fa:3e:3c:a2:2a:7e:c3:
33:0a:74:40:82:3c:52:5d:65:9d:35:05:75:de:3b:
6b:55:9b:76:fd:a0:c8:00:bf:bc:e5:d5:2e:55:24:
85:77:ca:d4:ba:93:f0:b8:7c:33:fb:a3:b0:f2:98:
3d:fe:c7:f4:c9:49:6e:92:78:75:83:59:cc:f4:44:
88:36:8a:3d:7f:04:2e:c8:90:1f:6d:e6:0b:da:ad:
98:b0:8e:f1:29:a4:22:81:1e:a9:34:2c:96:1c:66:
5b:bb:3f:fe:07:49:14:69:f3:a4:91:33:7b:ef:88:
a0:fc:a1:18:a3:01:81:fe:bd:f7:bd:c2:46:f1:c6:
44:76:c5:22:f9:02:5e:2e:a7:e2:6b:d0:47:eb:fd:
c2:ba:20:21:4c:39:82:b6:8c:0f:61:cb:92:54:58:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:EB:24:29:92:C0:3D:E9:8A:07:F2:5C:D0:BE:70:EA:09:A6:3F
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:53:55:c6:c7:80:6e:75:a3:fc:0e:ad:f8:71:8a:48:fd:
99:c8:b9:67:1a:4e:18:fb:00:4d:25:80:ce:29:07:07:54:8e:
86:0e:f0:8c:3f:11:2a:94:53:19:51:0f:3c:a7:cf:f7:09:24:
57:58:b8:eb:93:ee:17:ca:a4:0d:df:ac:e4:b8:a7:dc:38:d5:
0c:81:75:41:8f:2e:f8:f0:33:93:93:14:e9:61:42:4d:3c:63:
fd:0d:f3:18:53:06:86:af:9e:ac:f9:12:65:97:43:13:4e:81:
45:b3:38:c2:8e:99:9a:56:a8:2c:c6:28:87:d7:3c:58:d7:1c:
67:5d:d4:d9:ee:32:ca:f5:6f:44:30:13:7b:f4:99:6f:10:fb:
12:9c:a7:ab:45:9e:6a:34:af:73:82:6b:c5:f5:0e:1b:e6:65:
c1:53:2e:41:b4:fc:1c:66:e2:d8:14:25:50:f9:d4:0f:c9:80:
72:96:af:b8:96:18:ab:1d:33:cc:fd:40:ea:a2:2f:b0:e8:3c:
02:6b:1a:17:59:e7:38:62:ad:0b:3d:a5:6a:df:97:f5:bc:18:
2d:17:09:4f:bf:0b:9a:08:80:12:1d:6e:f9:5d:7f:6f:b8:ac:
d4:bf:f6:57:05:fd:a4:94:31:3a:45:95:9f:2a:2c:86:2e:ae:
c2:45:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:01 2025 by rpki-client