Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: KKOBWD1LK5HcaLMBRLYKCUnRkSc89v5sXxnIvIzvNso=
Subject key identifier: 72:CC:91:8C:71:98:53:32:34:02:84:DC:0E:D4:50:A8:D4:17:8B:DF
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 0198D5BC0DDB90CB9BB82BD702AAD41AA182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: t2wQj1UTw8lu1f5Pwvz724JY+A/4QtoIJ9Bu67zwG/I=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0d:db:90:cb:9b:b8:2b:d7:02:aa:d4:1a:a1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=72cc918c71985332340284dc0ed450a8d4178bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:ad:9f:86:53:69:4d:a9:d3:9d:e6:29:6d:
18:81:bf:5c:83:65:d1:6e:6f:73:af:57:76:1b:2e:
98:43:65:92:fb:14:22:e4:d1:00:be:c2:c4:6d:f3:
f7:e0:5d:dd:3d:76:3f:4d:7d:1d:ef:6c:a8:70:42:
8e:eb:70:8c:bf:b7:8f:f3:b7:2c:3e:e2:e5:52:b5:
10:78:51:92:97:75:4c:99:48:a9:3d:76:24:a9:82:
e5:0c:be:2b:e1:2b:73:ed:2f:f6:63:e4:f1:a7:90:
b9:94:b9:b6:6c:d6:30:29:5c:21:b3:b6:1b:e4:8f:
bb:30:97:96:01:6c:61:28:36:91:c9:00:35:e0:18:
87:e8:17:e5:4e:3e:14:91:a1:70:b3:c9:09:d6:ff:
2d:aa:fa:c1:07:b6:1e:30:86:ea:cb:a5:e5:4e:70:
6e:28:a5:be:e6:b5:4e:8f:c1:86:7a:32:69:e5:1d:
29:d0:c7:96:f5:3d:c1:00:85:f0:a2:db:3f:d8:fd:
21:9b:1a:b2:4f:33:a8:e6:67:8c:1c:77:ca:72:b6:
d2:d0:55:37:7d:40:37:17:81:98:ff:46:80:7e:20:
c1:84:84:cb:7f:95:76:c0:1f:e1:ec:c9:aa:7e:aa:
1d:37:41:11:1f:cd:a6:22:03:85:13:bd:f6:05:40:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:91:8C:71:98:53:32:34:02:84:DC:0E:D4:50:A8:D4:17:8B:DF
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:b0:17:c6:42:3c:85:76:75:a7:cf:cb:02:0f:80:3d:af:
f1:bc:ff:14:44:8f:a0:96:f2:33:51:cf:77:8a:9f:a3:64:de:
aa:12:f6:75:7c:b4:d7:b3:b1:ea:40:15:bd:c2:51:49:ee:f0:
4c:ba:3d:ef:91:c9:9d:84:b6:17:1e:c0:2b:b4:66:f7:b2:c6:
ef:dc:04:16:b6:ad:5d:70:d5:df:d9:ca:de:2b:43:8c:5c:49:
d0:df:d2:99:b5:76:cc:45:82:b0:29:a4:58:20:65:f7:d4:d2:
3a:9f:4c:3a:23:80:e4:5f:79:18:2f:23:ed:ca:b2:e2:c9:8b:
33:57:6a:80:2c:08:43:c6:17:a6:41:d2:04:35:de:75:76:98:
7d:9c:67:6f:77:57:6a:ca:37:1f:fe:1e:5c:1f:92:8d:82:7d:
a3:2a:fa:80:4a:69:39:04:95:5a:b0:91:cb:57:f6:6b:db:c4:
46:6e:5b:b4:bf:71:ad:7c:da:ae:17:44:67:68:5f:0f:83:92:
d3:ba:c1:b3:db:06:59:ca:d3:c8:86:6b:bf:49:41:05:5b:2a:
80:91:6c:21:7a:ec:4f:86:dd:cb:80:89:1f:8a:26:d5:ad:b0:
54:72:ba:d2:87:cd:64:f5:13:d8:39:c1:68:e9:5f:33:86:f3:
b2:81:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:52 2025 by rpki-client