Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: n/LkvGOt3KomagNui4wWz4J2PIgEOzsMttwpDK+axmk=
Subject key identifier: 02:1A:D8:33:3B:07:B6:FF:EA:BE:78:0A:AF:B8:D2:B4:50:F8:59:73
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0198D7736522F2C1C8A363074511314B06DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:02:00 +0000
Manifest this update: Sat 23 Aug 2025 15:02:00 +0000
Manifest next update: Sun 24 Aug 2025 15:02:00 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: vBYLFq/+tem7U3xqD9RJjs0Nt7z5tJv0jgI3mPCivkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:65:22:f2:c1:c8:a3:63:07:45:11:31:4b:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Aug 23 15:02:00 2025 GMT
Not After : Aug 24 15:02:00 2025 GMT
Subject: CN=021ad8333b07b6ffeabe780aafb8d2b450f85973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:51:92:8b:9e:e3:a7:13:c9:f9:9e:51:e6:
71:1f:c2:97:22:a8:0f:84:03:1d:68:4a:05:87:3f:
05:51:ca:00:8f:b0:f0:7e:a1:07:ca:49:c3:79:8d:
11:2b:7f:d2:2d:bc:0e:36:b0:a1:e3:75:0a:d0:d2:
86:6d:d4:fd:56:18:2c:82:4b:af:78:2e:93:d2:69:
e1:3b:f5:ce:dd:74:a6:f5:da:03:73:f0:00:28:37:
0d:93:81:b7:2c:ec:db:66:6b:93:22:53:7e:e0:b2:
2c:13:85:6f:01:18:b2:c1:26:7a:55:b1:9a:7e:df:
0c:c6:b3:07:4d:59:63:ae:b6:10:b4:f7:c7:95:06:
60:ed:74:dc:fa:a1:9b:0b:49:5a:d9:22:a8:9e:f4:
da:ff:3f:80:90:fe:0e:88:00:5f:05:27:05:14:f7:
e9:db:0b:79:1d:73:0f:44:53:92:cd:a8:df:70:24:
61:d3:c3:51:74:dc:bb:80:4e:47:d7:0c:bf:59:47:
4f:84:ff:d0:e5:17:f9:ef:8c:b0:e7:4c:6a:b8:d5:
94:d3:93:90:56:06:6e:4f:1f:f3:d7:5b:fd:79:94:
73:3b:14:7b:db:98:d6:12:92:e0:db:a8:e4:46:25:
17:bc:e5:80:ba:96:75:36:8d:a8:ee:e9:cc:6b:95:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:D8:33:3B:07:B6:FF:EA:BE:78:0A:AF:B8:D2:B4:50:F8:59:73
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9f:ad:45:a4:f9:2e:1e:9f:67:64:c1:f0:ba:6e:e2:4c:3d:
92:52:f6:f0:b7:6e:9e:d3:d3:63:85:ae:18:f9:73:8c:4e:a8:
e4:91:8e:f9:3b:d3:56:55:9e:2e:86:d2:14:92:31:f8:b1:8b:
10:59:d7:90:cb:de:c4:b2:85:31:da:b1:09:74:d5:d2:49:7d:
ac:d5:fb:c5:4a:bc:f1:2d:cc:f3:70:2a:58:b2:ef:c1:96:88:
17:03:80:9f:12:6d:c9:e0:fe:1d:09:71:0d:f8:13:38:93:36:
20:2c:10:d6:10:e9:e3:9e:33:44:60:f3:eb:b2:cf:12:7b:6d:
1b:f7:34:a9:32:7a:e8:6b:1f:41:5a:4b:bc:38:d0:eb:97:d9:
0a:10:8d:3b:cf:8b:ce:4a:1d:33:ca:70:2a:5b:bd:d9:7b:82:
f6:97:b5:02:ba:16:55:15:2a:cd:03:77:9e:c3:6b:e3:3d:d3:
b1:b2:bc:58:8b:88:e2:ca:87:ea:c4:04:87:44:27:66:c2:5c:
16:77:21:fb:c2:a8:2f:fc:df:4e:19:21:0a:2a:39:ca:20:d8:
7d:39:6d:5f:d1:73:96:ca:95:46:68:de:df:bb:7f:1a:2b:3a:
f8:4d:15:c0:f1:8a:2c:0e:da:c2:4f:cd:99:37:4c:f2:8d:c2:
aa:ba:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:25 2025 by rpki-client