Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: VqMPKrnhQ+sjLeL2r20KhPv+/SY3H86tbghvUhBDNpM=
Subject key identifier: 14:2B:CE:B0:11:2C:5C:01:51:AE:D2:5D:7E:66:E2:42:AF:BA:9A:06
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 0198D5F126C07166F858C10F3D65AE6329DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: M+2VPGAftosNy95AWRjkmgSXwHvwbEsyY/wx3zBQG9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:26:c0:71:66:f8:58:c1:0f:3d:65:ae:63:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=142bceb0112c5c0151aed25d7e66e242afba9a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:2e:f9:8e:25:e4:bb:fe:a4:a0:5d:3f:a3:
8a:00:3d:eb:da:7d:16:e2:06:c2:63:84:c3:91:40:
ae:24:98:3c:92:23:b1:74:c5:31:76:46:f1:8b:3d:
8f:83:52:92:29:05:96:40:d9:4a:e5:4c:a6:8f:75:
ed:e3:b0:c1:06:43:51:60:fd:ef:2e:29:53:9a:0c:
5b:49:04:44:02:41:66:75:bd:91:bf:e0:b2:5e:ad:
6a:f2:39:cf:31:a9:00:19:a8:fb:a6:dd:72:14:f0:
a8:2e:3d:43:56:fa:9d:9c:a3:cc:3e:ac:f6:b3:ad:
24:cb:d3:e5:eb:74:d5:39:66:db:a8:83:3a:41:a8:
86:52:81:a6:d3:78:00:b7:ce:0c:5b:55:cf:d8:b8:
8a:6b:0c:32:93:5e:0d:3e:3e:95:62:7b:80:75:66:
9e:66:16:df:9b:4f:93:30:55:f7:eb:0b:11:fe:51:
31:fe:c1:14:45:7e:fc:53:ac:11:ea:2b:ea:11:8b:
28:69:05:39:f5:3f:43:36:e4:ed:ae:65:a0:19:11:
c6:b1:31:e7:18:58:01:95:cb:6e:85:d5:6f:2c:2a:
c2:5b:9f:70:2b:0b:9f:3b:6b:c6:15:8b:1c:89:d4:
72:0e:5c:bf:d5:99:3d:6d:6d:0d:c7:de:2f:18:c8:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:CE:B0:11:2C:5C:01:51:AE:D2:5D:7E:66:E2:42:AF:BA:9A:06
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:d8:a9:fc:4d:d1:e9:02:fb:e8:fa:95:9c:a2:4f:89:60:
01:7e:5a:47:a4:4f:57:62:7e:78:91:fe:0b:03:32:61:cb:7c:
f5:bf:0b:a2:8f:a3:00:a6:81:70:5e:55:9d:59:33:a8:5b:87:
0f:ea:cd:82:1d:89:5d:93:ce:49:ab:04:15:e0:af:56:52:1a:
fd:65:89:35:dd:1b:20:30:27:5a:df:4a:44:ad:60:4e:2c:05:
07:e6:ae:35:06:17:e8:04:9e:9c:ab:cb:a1:db:32:6f:50:1f:
ab:8f:60:f9:df:75:20:89:7d:16:2f:95:8b:59:84:7a:21:78:
1c:0e:44:2b:a9:4b:6c:7e:1e:41:4f:74:da:a4:1f:6a:74:89:
83:ec:15:a6:4d:15:41:fe:00:6f:f6:89:53:86:e6:b0:3a:b7:
3e:f4:72:42:30:6d:1e:fa:2f:41:c7:e8:b5:9b:18:fc:01:0d:
49:d5:bf:3e:51:f3:71:c7:c8:fc:93:2c:47:9c:85:60:13:24:
1c:c1:68:86:78:c8:92:09:20:20:81:c3:f1:30:6b:c5:d3:06:
f2:6d:36:d4:1a:0c:e8:45:4f:3d:5e:1d:8b:43:e9:3b:2d:fb:
6c:11:30:36:bb:ef:ba:ab:c3:b8:8b:3e:bb:a4:9f:df:8c:55:
e6:c5:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:35 2025 by rpki-client