Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: 2QYIa44+UNCFLYlBwWW6mNIP4D0RjUbiO878dfNt10A=
Subject key identifier: 96:C3:95:8F:1B:58:D6:4C:14:E7:4D:57:19:78:92:7A:A7:27:AA:1E
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0198D5F14DE5F67179B37A98EBEC3D6F6D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: sv0Q1Y/WQYYJ6eNEXTLqUFbGtEy4BdkZDedlKWOoQzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4d:e5:f6:71:79:b3:7a:98:eb:ec:3d:6f:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=96c3958f1b58d64c14e74d571978927aa727aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:fb:ad:3c:51:e6:27:8a:e9:8a:84:34:40:
7c:86:0d:44:d2:66:1a:fe:81:91:82:1e:41:e4:16:
87:15:5e:10:ce:c5:5c:26:de:9d:5a:9f:83:59:ae:
49:eb:4b:d6:ae:28:c0:81:f6:84:a3:5a:a5:36:f0:
e2:eb:2d:8d:75:60:26:67:c0:fd:79:fa:3a:42:71:
8e:13:8b:40:97:07:91:45:e2:65:77:cd:00:cc:f5:
23:9a:30:3f:37:87:a2:82:b4:84:16:a2:90:89:6c:
0d:4e:60:61:e1:c4:40:05:95:8a:d1:f8:96:20:e9:
d6:5e:f3:89:9d:a9:fe:3c:e4:10:1a:80:4a:28:e3:
8d:79:cc:a4:7c:1f:9d:e3:f0:ce:cd:16:b8:07:2c:
f4:6f:0b:c2:d6:10:1a:c2:2b:b8:de:63:ef:11:a8:
1b:95:52:71:07:42:20:13:91:32:fe:f1:7a:69:6e:
20:49:fd:f2:da:42:08:79:37:72:9e:1d:a8:ad:5b:
1a:cc:6d:a0:c9:12:13:22:a5:1c:0f:d0:50:86:a1:
31:c9:f7:4f:ad:cc:90:c5:c2:45:99:a7:ec:94:3a:
fe:51:f8:c5:b2:f1:0d:c7:d2:d0:a1:f2:b7:6d:67:
1f:32:25:a0:c3:9c:be:ee:ac:c0:23:73:5a:ee:fb:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:95:8F:1B:58:D6:4C:14:E7:4D:57:19:78:92:7A:A7:27:AA:1E
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:fd:d5:ed:5a:aa:4f:a5:ea:e1:79:dd:64:8f:d7:e6:5f:
b0:54:ff:fa:f0:42:1f:92:c9:28:1b:be:33:8e:f7:df:4f:7d:
8f:cc:36:0e:4a:11:77:9a:76:a0:c2:3e:57:f0:dd:f5:63:33:
b4:5c:73:a4:8c:84:f2:e5:e8:84:ea:bd:2e:b8:76:47:19:b8:
9b:2c:e9:fb:86:5b:e8:63:37:d8:03:57:23:68:ef:f8:de:c1:
2d:8d:ff:4a:6f:cb:93:e7:3d:07:55:8a:f2:f7:45:36:d0:ab:
f9:84:29:57:c5:60:16:55:79:f0:df:6e:d2:33:96:15:7b:b6:
f5:61:a8:b1:f7:a2:6a:db:af:21:95:81:02:73:92:8b:fb:e3:
e6:05:f0:14:bd:2f:cf:34:a6:eb:0e:60:df:6c:b2:c9:ef:c3:
39:32:f2:bf:05:07:9b:7c:9e:e1:11:e7:58:03:52:d9:e2:ca:
5c:a2:74:48:70:ca:3b:99:ea:11:57:95:a7:f4:53:df:04:78:
03:a0:92:99:99:57:4e:d6:51:64:d2:f5:a7:03:d6:82:c1:36:
59:04:32:10:92:68:80:32:fc:06:61:db:42:35:1d:86:a7:04:
f7:f3:22:0d:71:e8:41:94:e4:6a:2f:dc:5d:1a:cd:8f:12:89:
65:67:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:40 2025 by rpki-client