Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: hbXzCDkWkOfyX1yw57OJZxQHlubYtjZo1uTbmUh3H9g=
Subject key identifier: 29:21:39:93:CF:76:77:5B:74:99:49:8F:CF:6C:6D:01:DE:67:76:7A
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 0198D5BC298EA5E8029F026AFB33337502C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: paUoq23pvdI0mjZhTF0b0IZxWYWu46nPh8TAeLA1Gio=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:8e:a5:e8:02:9f:02:6a:fb:33:33:75:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=29213993cf76775b7499498fcf6c6d01de67767a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:4d:fc:93:4b:6b:86:a9:bd:a9:4a:81:a3:
97:25:04:68:22:b8:c3:61:df:5a:8c:73:c9:9c:7c:
fe:9b:3a:4e:8f:e0:c9:23:e7:4c:39:fb:d4:ed:38:
c8:5f:d6:20:96:60:02:1a:34:f4:a5:56:cf:08:7b:
94:32:f7:49:d3:c2:11:5b:ea:1f:bf:e2:60:4c:2d:
d9:9c:80:5b:2e:49:16:e5:1b:fe:ce:7d:be:c6:28:
a4:49:e0:13:6e:0b:83:44:25:66:ee:bf:0f:45:98:
57:9a:92:59:ca:a4:8a:29:3d:36:3c:d5:ae:b6:ad:
f1:55:e3:27:70:23:1c:8a:a1:1e:9e:d0:94:05:4e:
8c:64:0a:9b:7a:8a:5a:2e:be:c1:36:3a:34:ba:c8:
ab:90:5e:03:45:9b:b4:42:5e:b0:74:28:92:2a:fb:
c4:d3:b2:61:72:de:19:04:18:2a:b9:a2:75:41:df:
e0:8e:16:43:54:ed:ff:c9:9a:82:06:7d:25:1d:aa:
26:91:22:fe:2f:d4:be:e1:2a:1b:11:1d:e7:21:62:
99:3e:44:4a:27:3e:b0:26:cf:6e:2e:a9:df:af:8f:
f3:fb:f7:a0:4d:13:b7:16:bb:b0:51:26:56:8d:04:
c6:c1:39:f7:19:89:f9:7a:87:fb:34:69:68:7c:fb:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:39:93:CF:76:77:5B:74:99:49:8F:CF:6C:6D:01:DE:67:76:7A
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a3:b1:e0:d7:e9:25:ec:67:84:74:c2:d7:82:05:c5:19:7d:
e2:36:f8:df:73:40:32:33:64:71:ca:7f:32:79:a2:cf:10:5a:
9a:77:93:dc:df:bf:d8:4c:53:b3:79:79:dd:8b:03:62:9e:21:
b5:e1:1d:2a:05:fe:7d:e7:98:77:a2:59:a6:60:9f:85:f7:08:
6a:d0:d7:bf:24:78:d0:d0:58:c6:a2:50:f3:4e:a0:ef:6e:6c:
36:85:ba:2b:77:31:3b:64:b9:7e:4e:4c:34:c5:9c:7e:75:17:
1b:92:bf:cd:34:64:8c:45:22:bd:11:36:43:b1:8f:3e:d0:96:
ad:38:8a:11:01:cb:e3:42:6c:3b:79:15:52:f1:05:9e:b8:68:
bd:3f:05:04:09:52:d3:6b:bb:7e:f2:fd:36:2b:83:44:db:90:
6d:7d:3e:fc:ad:13:f0:22:c6:0f:69:49:b6:e9:c9:4e:78:4d:
c1:1a:ec:7e:4f:39:d5:cd:a4:2c:80:24:6e:71:ad:73:f3:0d:
9c:38:da:83:59:09:28:fb:cf:ef:d9:89:47:f2:e6:e3:0c:08:
d4:6f:5c:b9:51:9a:97:3f:23:3c:c5:25:af:cf:8c:18:51:70:
ef:6d:5f:a0:1c:10:81:cc:f5:6f:e8:a9:26:ef:13:1e:97:e9:
5b:f6:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:23 2025 by rpki-client