Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: Tx7ZlfafiKZIXU5jbxg6YNxqupO8arecHr4YYquZRKM=
Subject key identifier: B1:D9:07:5D:C6:91:39:AB:B7:AB:4E:15:52:46:BB:56:A8:F8:2B:70
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0198D4A7BBB0679E8A0F5BC4D9C7A371BA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:18 +0000
Manifest this update: Sat 23 Aug 2025 02:00:18 +0000
Manifest next update: Sun 24 Aug 2025 02:00:18 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: AFytboX3G54OfM8G6mAefJhhkeWGVBJaDqn24RQ2d9o=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bb:b0:67:9e:8a:0f:5b:c4:d9:c7:a3:71:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Aug 23 02:00:18 2025 GMT
Not After : Aug 24 02:00:18 2025 GMT
Subject: CN=b1d9075dc69139abb7ab4e155246bb56a8f82b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:e2:d9:ba:01:3e:9a:77:81:b7:20:7a:99:
f7:f0:81:bb:ac:0e:f7:98:72:a4:c3:83:4a:c8:f5:
13:09:46:58:26:57:89:65:a2:5d:fb:d9:50:3e:39:
e3:82:07:ae:cc:bd:83:a8:25:49:92:59:7e:81:6d:
f9:fb:5f:cc:fb:75:b2:be:ac:89:fc:f6:81:b2:35:
68:f4:de:d3:78:b3:82:b8:92:8e:c0:36:98:d6:d8:
21:29:66:c2:09:19:c3:9b:d2:23:45:66:d4:cd:12:
47:26:1b:3e:a7:97:e2:7e:5f:29:cd:7a:e4:ba:ba:
8b:22:fb:42:84:ec:ee:9e:23:56:b2:5a:f1:74:75:
e0:e4:5d:19:c0:6b:7e:f4:d3:5c:02:c0:8a:e4:6f:
57:e5:09:5d:9d:d2:6e:39:d1:f6:ad:08:55:2d:d2:
37:fa:79:5d:95:5c:46:00:59:47:6b:77:fb:a1:38:
b3:07:a5:4e:60:fe:b0:d3:2c:0f:71:d9:6a:72:72:
b4:2c:ff:5a:06:16:e5:40:61:be:8e:07:94:6e:61:
82:fa:54:85:34:d3:e4:25:a5:e8:09:d4:16:7e:69:
eb:f3:2e:4a:c7:91:6a:92:ea:42:b9:c9:11:08:ac:
68:0e:71:31:f4:3d:94:66:1e:d0:e9:f4:5c:a2:d0:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:07:5D:C6:91:39:AB:B7:AB:4E:15:52:46:BB:56:A8:F8:2B:70
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e2:b6:6e:9f:80:ca:fe:a8:8a:f0:8b:d9:ea:6c:7c:72:e3:
f1:99:f1:05:b3:36:4a:b9:c6:fa:42:f3:6c:fa:59:be:27:f6:
58:f1:2c:1e:78:ae:a3:4c:37:74:2e:f8:15:5c:b7:f7:ba:90:
f5:f2:d4:04:2d:7b:6d:21:a4:bd:7a:d1:a9:4c:88:fe:39:ae:
68:5d:b5:d2:9f:57:d4:4d:1d:9d:4d:3f:39:6d:93:7c:5f:96:
74:d7:fc:95:de:4a:ef:8c:56:23:89:e7:3d:5c:26:9b:44:db:
23:9a:10:cf:36:f3:0b:3f:33:58:17:e8:6b:1c:32:6c:9b:51:
6b:7f:fc:98:18:09:86:f3:93:e7:3e:af:ae:df:6b:28:9e:76:
da:dd:94:6c:f5:da:48:25:c8:14:9d:1a:40:46:cb:ef:c9:30:
64:42:a2:b6:22:22:73:6d:80:e7:c5:98:0f:a8:8e:35:18:95:
cc:b0:ba:1c:78:44:e9:aa:a4:91:51:d2:2f:10:e0:e8:3a:56:
90:88:ed:c8:ef:4a:38:68:ea:39:bb:8d:09:b4:26:09:af:67:
d4:d1:5e:6b:be:8c:50:3f:26:73:e2:79:c6:ae:93:93:d7:cb:
c2:b4:9d:39:d2:6d:33:61:2e:9d:ee:f3:2a:68:bf:76:ba:80:
eb:6b:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:46 2025 by rpki-client