Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: laEp6FVndy+X3BaZXmE6CRHH7gQaT+WfrlcJ+KuAQF4=
Subject key identifier: 8C:B2:CD:23:87:13:23:1D:A2:F4:E6:EF:78:AF:4E:91:D2:D4:D6:EA
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0198D4A796DE2BF20AD2B9A23F1F9A861348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: Q1SIYjlNVfdlaFgLSoMEA3OuAWP5ANAf8Hf6oDNa86E=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:de:2b:f2:0a:d2:b9:a2:3f:1f:9a:86:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=8cb2cd238713231da2f4e6ef78af4e91d2d4d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:cc:77:f7:42:d1:f2:0a:d7:83:07:50:eb:
8a:8b:82:af:ac:96:e0:dd:a6:19:36:26:0c:35:35:
56:ea:a5:5b:48:f1:e2:fe:7e:3e:f0:67:ee:c8:f6:
57:44:72:ce:f2:75:e8:b5:cc:d5:d3:e4:8a:9e:1e:
18:c4:6d:84:61:a3:e2:84:7e:e8:f3:62:56:ec:3e:
eb:de:5e:75:44:4e:ed:dd:db:b8:c5:c4:e0:9e:c2:
d2:ff:17:fa:83:86:0d:3c:41:c3:70:a4:fa:e7:39:
25:4f:1f:d3:1e:ac:22:a8:a5:c5:d9:2f:06:21:92:
ac:f8:a1:f2:50:69:f6:33:28:aa:ee:09:1f:eb:e9:
72:ce:98:60:6d:87:4c:40:38:82:86:5d:4f:18:df:
cd:50:57:83:f0:8a:45:fd:c0:93:5e:83:ee:f8:f0:
ed:77:7d:81:0e:54:24:6b:1e:3d:75:77:26:cf:6f:
ca:91:87:43:7a:be:35:01:71:a7:3c:61:83:b6:49:
4b:b1:9f:7a:5d:e8:50:7f:da:d6:dc:12:fe:01:bc:
27:f9:f9:21:63:1a:dd:6f:a7:b5:fc:fc:6e:98:1d:
b1:63:ef:c6:04:5f:ce:9c:4f:64:5e:b6:87:7d:76:
e7:c4:55:c0:d0:d1:fd:1b:83:7b:13:11:5b:a2:4f:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:CD:23:87:13:23:1D:A2:F4:E6:EF:78:AF:4E:91:D2:D4:D6:EA
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:c9:2e:1f:cc:30:cf:c5:42:ad:df:87:99:ad:5d:58:12:
81:51:23:48:7c:22:73:55:8b:48:e1:59:68:87:ee:b2:2e:a3:
4b:e6:1e:38:10:2c:4c:68:31:bd:cd:30:93:aa:06:f0:0a:ce:
b5:33:88:7c:5f:b0:6d:0c:92:35:c4:da:6b:9f:e1:3f:76:3a:
96:2b:70:73:70:21:e8:28:45:40:47:bd:62:23:6f:f7:f5:e3:
4c:3a:41:2e:c5:cd:4a:8c:c3:8e:a7:4d:bf:a5:5d:0f:db:ca:
24:4e:8a:12:b5:5e:6f:4a:1e:9a:d5:5b:8b:96:ee:fe:ef:54:
a3:eb:b5:63:bc:ef:65:46:fd:d9:0c:ef:84:c2:0a:73:54:36:
55:95:18:98:fb:2f:f0:4b:c8:2d:71:30:2d:54:4a:f0:99:f8:
4a:a3:f2:1c:22:7b:85:47:27:82:92:a0:a6:f2:af:cf:39:1c:
ab:33:ad:6d:95:a5:e9:ac:2e:53:8a:db:16:d2:a7:2b:19:f5:
11:03:b7:94:fa:c2:dd:96:01:fd:1f:bb:3b:7e:80:73:94:02:
79:7a:04:ce:47:bd:aa:25:1c:23:60:78:f3:e7:62:93:b8:36:
5e:1a:47:be:ab:b5:22:8f:85:e6:6a:11:d2:d4:90:6f:31:bb:
4e:1b:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:17 2025 by rpki-client