Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: ALs16v49q7qUXPHhdnDH5P8KR3iqkAyUgRKXHKr2f+A=
Subject key identifier: 8A:A5:AA:6D:8C:9E:B6:70:AD:A2:BA:8A:64:19:35:C3:49:C3:24:E7
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 0198D65F19BD8B7958BD1CED327B58F8545A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: jOIpydNNeey6GS8tDTK9aj0t2xsmT6rlkVViOz3wV8o=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:19:bd:8b:79:58:bd:1c:ed:32:7b:58:f8:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=8aa5aa6d8c9eb670ada2ba8a641935c349c324e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:9b:4f:c4:1a:34:0f:b1:bd:4e:32:82:db:
24:9a:03:a8:66:36:5e:90:0d:07:37:4f:17:2e:c0:
e3:92:51:e3:ac:1a:17:7d:da:cb:61:42:05:e4:61:
e3:da:1a:9c:f6:08:86:bd:64:e0:dd:93:9c:7d:49:
38:ae:77:d9:35:b4:40:32:b7:64:82:f7:a9:42:e2:
33:5f:31:d7:3e:ef:d5:55:5a:bf:be:a5:8a:e0:63:
d2:64:b9:8d:bf:ab:ab:d1:01:d9:8d:14:c0:90:59:
7b:f8:4c:45:fe:09:10:49:a6:27:65:af:89:3e:8a:
32:8f:24:bc:fd:d5:fb:4d:0b:9c:f0:6e:4f:d8:15:
33:88:b8:83:83:a3:a4:e2:c8:b9:9d:e9:cd:bc:7f:
b8:1e:03:4a:a7:d7:58:c2:29:d5:a5:69:35:6d:20:
93:ae:00:58:6f:a1:8a:3a:9f:08:25:25:46:94:1f:
c9:66:4f:75:0d:63:93:8a:4a:13:1f:07:9e:2c:1d:
91:bb:1e:93:88:f6:c2:51:47:8d:6d:79:a5:1a:4d:
b6:52:d4:35:4a:c5:db:a8:3f:b3:74:dd:e9:77:26:
9c:9d:33:75:c7:43:7f:23:c0:af:37:a6:4a:21:16:
5e:07:c3:bf:4b:7a:e2:fa:0f:c0:29:e2:29:b5:7e:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:AA:6D:8C:9E:B6:70:AD:A2:BA:8A:64:19:35:C3:49:C3:24:E7
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:8b:46:8d:b9:73:24:01:dd:ea:e5:0d:f4:3a:7d:53:e6:
b8:96:bb:36:16:8d:db:65:92:b1:b1:fa:48:03:35:ca:da:d1:
5f:a8:2d:52:7a:e2:6e:3d:2e:4d:01:90:b4:04:5c:1f:30:d2:
10:bd:d4:c8:14:ec:43:07:b8:4d:1d:dc:6d:c8:4f:48:46:a3:
51:00:6d:28:72:30:02:fc:ab:bc:2c:41:92:41:6d:c6:4d:c6:
84:11:7c:10:78:4b:38:08:40:02:2b:e4:10:e8:a1:09:7c:39:
30:49:0a:be:ca:48:24:e8:5b:0a:5f:40:97:42:92:c6:2c:18:
6b:b2:4a:04:70:9c:8c:ea:ee:2c:a1:c2:af:db:83:98:84:8a:
7d:36:2f:19:1e:ba:fd:30:b1:87:4e:01:f9:77:eb:2e:a7:b3:
50:be:6b:95:ff:7f:41:da:4a:c1:ee:0a:7f:a3:91:7e:d4:dc:
03:47:e3:38:9d:bb:c3:7d:3e:be:c1:74:7e:e1:d0:47:62:48:
c6:e0:b3:18:3d:27:5a:4e:69:bc:6c:2c:a2:4e:e7:69:ae:ed:
54:5b:42:57:46:8b:83:72:66:8b:13:d8:8a:89:65:42:3d:0b:
0b:23:b7:21:b4:e1:a5:09:66:78:87:b5:ad:54:85:01:3e:3c:
01:c1:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:09 2025 by rpki-client