Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: iaSsxmR7xJD893QAwfobycTfagnhVBTLwnz8z8W+SJ4=
Subject key identifier: 28:FE:B3:49:D0:3F:DF:D7:34:A3:9D:7F:BE:4F:F8:9B:DF:13:EC:B4
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0198D54DF8AAF85B7E03F68A1F4983AC7145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: OYEjeNTYTsmINhK0xTu/5TXs9lM9doAihDIM+PiA7OY=)
2: O47iRpmVJrN5kyLHejtw1EVG-MI.roa (hash: YFHAgBAtSXAS/PD/F6eJBYD3guMI7Imk/Lvqn022i00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f8:aa:f8:5b:7e:03:f6:8a:1f:49:83:ac:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=28feb349d03fdfd734a39d7fbe4ff89bdf13ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:f9:06:4e:6e:58:a2:0e:89:34:55:ca:fb:
f1:cb:f5:1e:c5:ba:4e:4b:b3:75:fc:e0:8f:ec:66:
59:54:e7:2b:86:bd:2e:c6:66:af:91:f7:5e:df:0b:
b8:45:62:6e:a6:09:36:c3:a1:91:65:ed:31:88:69:
c6:02:43:8c:55:00:22:8c:3c:24:65:e9:3d:46:8f:
89:67:e5:6f:1a:d4:e2:ae:29:43:97:ee:bf:3f:17:
d3:4a:7b:35:cb:ce:a2:1a:92:0c:6a:b3:20:06:b9:
4c:75:38:01:09:81:7b:09:1d:33:73:39:82:57:87:
cd:ae:9d:41:bb:3e:b4:71:3a:06:af:ee:c1:8d:f6:
62:3d:08:ba:35:01:90:db:e4:bc:01:79:38:08:40:
15:05:55:24:31:d7:9c:87:b7:db:d6:fb:99:ae:a4:
1a:ec:58:f5:22:40:b9:69:61:98:06:40:06:16:ae:
7d:bf:e1:f6:e5:24:1e:ad:e2:71:7a:ea:bc:d5:82:
57:6f:0d:c7:cb:6d:28:0d:76:01:38:b4:45:83:fa:
3f:c1:14:20:a8:53:1e:0f:12:2d:4f:51:15:66:5b:
51:7f:59:0d:58:7d:ce:55:ab:85:f6:0b:86:0b:ca:
0e:53:62:e7:64:39:49:4d:b7:9a:7a:e6:d6:b3:29:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:B3:49:D0:3F:DF:D7:34:A3:9D:7F:BE:4F:F8:9B:DF:13:EC:B4
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:df:a0:51:f2:57:23:51:56:ad:d2:94:88:57:30:af:33:
da:b7:06:40:69:b5:92:26:f8:1e:8f:b6:e8:e0:00:de:a0:89:
f9:af:12:4d:e3:90:c0:76:5a:b8:45:35:c9:8f:64:f5:d1:30:
00:d1:17:06:0d:78:e9:02:a0:c0:c6:39:c5:9d:2a:e8:cb:e5:
b8:7a:7c:51:71:b8:0b:3a:13:c3:65:b6:63:09:12:8d:ee:c2:
32:d4:99:b6:61:d7:83:24:6b:de:78:4f:19:9e:bb:65:e4:11:
9c:3e:dc:e4:31:f3:a3:55:41:b2:f1:4d:bc:d4:27:50:21:e6:
ca:8a:c0:83:23:13:08:30:ab:63:f7:d6:79:fb:df:6c:95:d7:
36:66:03:b0:92:7a:48:3f:8a:6f:42:ed:c6:ee:79:5c:b9:7f:
eb:69:90:ca:a3:79:ae:97:f8:d4:4c:53:09:7b:51:4a:08:2b:
77:e7:67:e8:2d:76:15:43:83:c0:b0:4e:55:1b:27:4d:22:2f:
5c:9f:71:aa:90:75:63:ad:af:9b:cc:44:57:ac:03:63:e7:93:
db:c2:33:6f:3d:48:2f:77:1e:62:53:1b:ed:7f:a9:aa:d9:24:
83:d2:40:5a:81:01:1c:4a:07:1b:f5:3e:08:2c:ad:f6:ee:e5:
a3:69:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:42 2025 by rpki-client