Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: 6qrBn7/xEicQANMTq+Mmve/zkXbHX6WoP4+rUwzD8Wc=
Subject key identifier: 67:A0:F5:F4:5B:A6:64:56:53:FD:CC:DD:DD:E0:A3:FD:B8:69:E8:65
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 0198D4A8420555D52666B9D61AC9AD62E906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: psZ0/rDtkHjX3b7s9zus9ckhLDPQetsmkskoeiiG2uY=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:42:05:55:d5:26:66:b9:d6:1a:c9:ad:62:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=67a0f5f45ba6645653fdccdddde0a3fdb869e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:2e:c4:aa:ac:e4:aa:cd:d4:36:e3:32:66:
74:a2:ec:3d:95:1e:c5:a7:b4:52:f8:ba:5d:07:c9:
c6:d5:02:2a:05:6d:97:79:60:40:15:93:f6:3e:c5:
c6:b2:c4:32:69:28:bb:1b:1b:92:de:ff:b6:d7:65:
23:bb:b5:77:22:60:5a:08:38:30:0a:6d:eb:11:bc:
7b:3e:00:99:b0:1f:a1:6a:84:bd:0b:1f:b8:0a:82:
9b:35:5f:6c:ae:72:a2:1d:c3:79:c7:0a:6a:a3:ea:
80:24:5a:0e:3b:e6:5c:62:15:b1:9f:63:f4:d5:75:
6e:51:06:06:f1:2c:6b:d5:e3:ed:f7:bf:a2:6b:f2:
df:3f:76:f5:02:6f:0b:8d:cb:68:9f:9c:2f:a7:68:
ca:ab:5c:94:28:7c:38:b0:ec:04:67:56:fd:d2:c2:
9d:54:0d:1b:33:1d:bc:20:5a:35:84:ea:4b:e3:7d:
f4:55:d3:00:8b:b7:24:3f:81:19:6d:b8:fb:cb:fe:
e3:2f:e6:c1:5f:a2:08:41:9c:29:d8:16:d1:1e:1a:
3e:f7:54:9c:02:89:ca:63:9f:c6:3b:d4:c4:c5:e6:
47:73:54:b6:ab:98:31:b8:34:3a:fd:0b:19:26:6e:
35:39:f9:0f:bf:b3:8c:43:e7:e1:55:fc:b6:65:69:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:F5:F4:5B:A6:64:56:53:FD:CC:DD:DD:E0:A3:FD:B8:69:E8:65
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:a6:56:5b:f9:41:1d:49:4d:7b:d3:8b:5f:50:3c:c6:99:
a6:31:95:a7:c4:b9:86:56:69:f5:9e:fa:bb:e9:49:1f:c6:fa:
bf:97:ef:4d:0b:49:bf:62:6b:37:50:12:f6:2d:79:b9:da:b1:
75:f9:57:be:c2:3d:c8:cf:ae:31:32:91:31:cd:a8:6e:07:d1:
ca:d6:59:36:b7:8e:1c:01:14:0c:fe:92:c5:5c:cc:a8:c9:b2:
3f:bd:97:1f:18:2d:91:c8:75:a1:73:a1:63:8c:af:1d:4e:cf:
60:44:d3:03:5b:6b:30:fe:0b:5d:f8:d2:f1:e9:3b:2b:81:07:
ef:32:68:23:78:39:a2:3a:17:6e:99:52:11:1f:5f:96:2f:c0:
ad:cb:e1:97:65:6b:76:8a:13:80:42:e0:8f:35:b0:a4:d1:8b:
b4:a3:c4:22:80:ef:a0:a7:12:64:c0:c9:8f:d3:13:ef:0d:09:
61:1b:da:b2:93:f4:56:87:9c:14:96:27:e7:d1:86:d0:9a:10:
45:2c:ea:8a:65:10:6b:3e:d7:b4:d2:bf:0b:91:7e:d7:2a:a6:
11:97:3c:7c:8f:22:34:3a:3f:e5:8b:55:ad:a4:63:3c:3b:67:
e8:96:ac:ee:66:23:91:76:c9:0c:d0:94:25:25:61:27:1c:7f:
29:03:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:29 2025 by rpki-client