Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: gV8v/Rt2c8TrNFe46cezL+bXT1+xoYkO5BlNvQFcIyI=
Subject key identifier: 2C:78:BC:74:C8:F5:38:ED:A2:E8:B2:B3:32:0E:A8:B0:33:E3:5D:FD
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 0198D998D22043600814313F14DF30FA03B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 164B
Signing time: Sun 24 Aug 2025 01:02:07 +0000
Manifest this update: Sun 24 Aug 2025 01:02:07 +0000
Manifest next update: Mon 25 Aug 2025 01:02:07 +0000
Files and hashes: 1: G3jkppDUZ7UShIbg3wj67wwITjQ.roa (hash: IM9aMDCOjn2pDhh5r2plZvteAbzhdwZ0L/lTf4RJayk=)
2: Tz1CIM1JoghruWTN6nGpazj8zTs.roa (hash: VV/wpFoAA0PEYjeaECSEYgoe19Q1uDYWZTbwDnhLY+0=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: dDl42o27mxZJuQAGFiawGCQB32Eio/ap41RmfKRM0Ts=)
4: qOyspdHf0vEJQuyvIz0XkgRHk_0.roa (hash: yR7LTFxNYmFcq/nxWYOH7mZupl2rRRW8SrPwUWcJB0k=)
5: uiGdfZv36ngdlEPtH0Dctu5_0kI.roa (hash: kwlBzu/ziaLKG7neS7FV84L3FCZ7YdUCR1fgHvPBMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:d2:20:43:60:08:14:31:3f:14:df:30:fa:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Aug 24 01:02:07 2025 GMT
Not After : Aug 25 01:02:07 2025 GMT
Subject: CN=2c78bc74c8f538eda2e8b2b3320ea8b033e35dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:95:88:bf:1e:fa:85:a0:79:34:8c:fb:6b:
03:74:fc:f4:19:af:22:cb:7c:b1:36:ae:14:95:62:
de:7d:49:0d:e3:6f:8d:30:1f:41:f4:83:07:fc:11:
42:8a:5c:07:be:79:12:6b:ec:18:9b:03:8f:ff:8c:
03:89:54:73:b1:19:21:0f:1d:dd:c5:e4:0a:7e:87:
6f:f5:94:ff:e8:b9:eb:53:58:ba:ec:fd:dc:39:c3:
98:f4:a2:b6:32:31:d4:5f:7a:ae:6e:22:67:8e:22:
3a:1b:81:19:0d:a7:b6:01:ec:05:7d:a8:45:b0:0f:
fa:b9:fd:49:6b:e6:84:68:6c:94:08:c3:f6:b6:88:
5e:32:aa:bb:10:34:07:a2:16:e3:06:7c:40:94:58:
23:74:d2:e8:ce:26:db:95:9b:e6:e0:34:3c:ad:6a:
c2:1a:9d:71:16:51:11:8d:4e:00:0b:fa:0e:3e:34:
ca:c3:75:27:cd:74:b7:61:a4:b8:75:20:92:a5:88:
ad:47:05:4d:1d:7c:23:e2:80:cd:0b:f0:d9:a4:60:
08:a5:3b:eb:22:97:69:30:ad:8a:0c:28:11:57:35:
60:c3:9d:a1:5b:e3:74:3e:a1:f2:64:ef:90:28:57:
b5:2c:02:37:fc:ff:d9:f9:09:e5:b8:6a:02:ca:28:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:BC:74:C8:F5:38:ED:A2:E8:B2:B3:32:0E:A8:B0:33:E3:5D:FD
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:9c:33:5b:1d:8c:5b:84:c8:5b:89:6c:52:1f:5c:f3:fb:
e2:df:21:48:db:cb:93:3e:97:98:da:42:40:0a:f7:cf:12:81:
57:4a:40:d0:40:14:88:da:90:da:51:1e:7a:52:e6:f7:ec:88:
a5:d5:f3:45:c9:fe:16:30:ee:51:be:b5:71:a2:bd:76:db:8f:
14:c8:d1:13:bf:75:7a:cf:9b:8f:54:80:8c:00:da:00:78:55:
f9:17:d2:af:f5:20:94:b1:5f:8d:2d:34:65:d8:01:a2:a4:f3:
f7:6a:92:bd:31:10:ea:c4:17:bd:39:4f:70:33:28:18:fe:03:
7a:96:00:23:5d:51:79:e0:a0:aa:9a:5d:b7:96:eb:50:61:f5:
04:b4:a2:53:43:18:1c:69:53:58:82:cb:85:b3:10:ac:e1:dc:
5a:02:61:6a:f7:d0:4f:e1:8c:05:f5:94:c3:eb:52:0b:80:77:
70:ab:99:f0:e2:6b:da:6d:2d:0c:73:f9:0f:dd:c6:14:0a:d7:
81:6e:be:b3:c1:1d:a2:37:77:1f:dc:a4:97:e0:62:12:0c:d0:
33:89:87:4f:8c:4a:82:c1:57:2c:2b:70:9f:47:f4:cd:ee:44:
b0:ec:0c:6a:b2:aa:db:8e:00:5d:66:72:f1:19:02:27:91:8c:
08:87:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:44 2025 by rpki-client