Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: f+V5p6o2osBSWJFlSEg0+TIttT4ZmxZ1t4LdLVaLYtM=
Subject key identifier: 16:16:A4:54:9B:57:D0:E6:ED:A8:31:B6:16:07:97:94:B6:A0:B0:AE
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0198D54E351F10D1966B825F5CFE447D8033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: dC+Kt0fx/S91kKfELF84X9UEkM9wFeZpi9vanllJtAE=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:1f:10:d1:96:6b:82:5f:5c:fe:44:7d:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=1616a4549b57d0e6eda831b616079794b6a0b0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:99:f8:4c:ca:53:c9:31:97:c1:1a:1d:f4:
0a:53:4e:94:b4:51:aa:2e:2a:be:e7:a0:3e:cc:3c:
e5:18:0d:07:63:d0:4b:b0:86:5d:5d:3e:5a:db:4c:
1e:18:a6:0b:eb:95:27:86:0e:29:8a:3b:ef:4e:47:
1a:cf:f0:c2:76:fe:ac:29:48:83:77:05:12:8a:58:
9a:d6:52:7f:65:f8:6b:26:b8:c8:df:82:43:8b:03:
d8:e0:cb:30:53:9c:92:68:01:b9:d2:72:e8:33:e1:
4a:64:93:05:a3:b9:c9:ce:73:8d:0b:21:45:a7:52:
16:2c:4d:96:19:6a:c7:cd:39:f9:23:8f:89:ff:94:
d5:31:98:72:48:b0:23:56:13:61:d1:74:7a:0c:73:
8b:02:a0:ce:14:36:9c:a4:03:3b:40:cb:7f:88:7e:
4f:dd:c4:d2:c4:a9:11:05:4b:79:17:d4:40:58:d1:
45:24:be:1e:aa:91:7f:6e:69:28:ea:d8:bf:2d:cf:
79:c2:9f:71:fa:eb:e3:83:b9:c1:4e:5c:d9:ef:d4:
c9:45:01:32:35:ce:d7:06:74:3d:1a:9b:9e:7d:2c:
93:df:ab:e2:19:02:f9:6c:a7:f4:2e:fb:e1:37:72:
55:6c:2b:f1:05:f8:d6:fb:79:a0:94:44:d0:35:d3:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:A4:54:9B:57:D0:E6:ED:A8:31:B6:16:07:97:94:B6:A0:B0:AE
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9f:34:c3:17:2b:5f:6a:08:ee:a1:e2:67:21:e9:14:f5:97:
04:59:b0:7a:6b:99:71:86:f9:7e:0d:74:98:b8:2c:95:b4:f2:
b5:24:c8:c8:38:5e:11:d5:2e:e5:42:b4:2b:8a:12:37:0f:e2:
46:99:67:fc:d1:44:51:4f:b4:43:27:da:9b:5d:ca:72:34:c6:
77:96:b4:9a:b2:c3:3c:c8:9d:8d:61:48:8b:39:fb:d2:05:32:
46:80:16:61:46:32:25:53:aa:8c:2f:0d:28:8e:84:3c:10:55:
6d:15:e6:ef:48:bb:76:86:0f:6b:49:c2:db:4b:4c:67:54:f2:
57:1b:f3:10:8a:53:21:a1:a1:ec:e0:84:d4:17:60:32:4b:2a:
04:b8:fd:d1:20:7c:ce:3a:8e:1f:35:2a:91:4b:d5:be:c9:a8:
1e:12:aa:87:94:9c:9f:a4:37:3f:a1:be:e6:79:dc:20:e7:09:
8a:f6:17:5e:c5:cd:94:88:88:a9:22:0f:dc:30:b1:15:59:f5:
d8:f3:bb:64:06:9a:07:09:58:b2:ac:6c:2a:b4:28:f6:8e:75:
c4:53:ed:ac:78:44:44:3f:99:d7:bd:a2:01:00:58:45:8c:eb:
7a:60:bd:5e:1a:ae:00:45:7b:e9:bc:09:ca:8b:a1:93:03:a9:
09:fc:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:29 2025 by rpki-client