Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: kJssm738w7uMaNbLExxgzJd8WDux14eyyxZCSewhoRw=
Subject key identifier: 84:24:62:C3:3C:B3:46:10:92:26:EF:EA:5A:F5:78:18:72:B8:B5:9D
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 0198D65F8094B8087D604309E34D3C45BEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: ZtfYqFe80kMxt5zxAf8jaMj9lJ4OLDyBY06Z0W5qKZk=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:80:94:b8:08:7d:60:43:09:e3:4d:3c:45:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=842462c33cb346109226efea5af5781872b8b59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:ed:42:d0:90:2e:bd:31:47:29:e0:18:4b:
cd:84:4b:93:4e:f1:de:69:dd:42:12:49:dc:fb:7c:
7d:a8:56:09:fe:e7:77:ef:02:86:45:ee:41:2b:37:
2d:5e:b7:4f:f1:b7:2c:45:57:43:90:98:04:08:8f:
01:47:c4:a6:73:ca:65:5c:fb:3d:4e:6c:f1:9d:6b:
bf:ec:f1:7b:d9:e5:06:f8:5b:47:59:0d:f3:3e:0e:
f5:36:8b:eb:b7:cb:8e:a1:82:b4:be:a8:ee:f1:3c:
d1:f2:d1:86:a3:4f:70:3b:02:b5:37:a7:26:86:18:
14:ed:ba:42:58:f0:33:d4:7e:ab:ba:ac:b2:e2:b1:
5a:c2:52:0d:4f:99:e4:76:ea:e6:70:bf:6a:f7:bb:
2a:db:24:c0:6b:ce:8e:4b:71:52:5f:f4:bc:a0:a8:
39:fd:e1:e8:d0:f5:4a:73:b0:63:9c:c0:73:86:70:
91:93:02:0f:fb:f8:00:e3:3b:39:bb:37:27:64:f2:
37:df:60:0e:62:f1:47:8c:d8:63:9f:76:fc:c3:14:
86:47:f0:ab:5c:c6:1a:3f:d7:f1:97:5d:b7:4e:92:
89:46:53:7a:b1:c3:18:d6:f6:ba:09:f9:6a:3a:0b:
9b:88:bb:ae:03:60:9e:93:7b:6f:6b:df:87:5a:b5:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:62:C3:3C:B3:46:10:92:26:EF:EA:5A:F5:78:18:72:B8:B5:9D
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:25:99:8a:c1:83:af:2b:a3:4f:6c:f2:46:e4:53:1e:be:04:
bb:de:cd:76:59:75:7d:e3:83:ca:a1:af:dd:7d:06:f2:96:0d:
85:32:11:fd:fc:99:05:3a:05:77:e1:70:b6:ab:d2:5a:b7:50:
7b:88:e9:bb:41:75:0c:46:af:0c:13:89:4c:f8:8d:82:5c:95:
71:88:22:b1:e4:28:45:0a:b3:4e:ef:3b:f9:58:52:83:35:56:
03:56:df:6f:bb:37:94:b2:c1:6c:11:19:54:a1:5c:62:d4:82:
29:bb:93:df:f7:1a:eb:3f:cd:44:74:42:e9:76:dd:60:8d:17:
f7:f4:3f:e2:bd:71:05:b9:97:8c:36:d6:15:47:42:26:c7:86:
76:cb:ee:2c:19:09:50:24:7f:fb:00:e4:cb:f1:62:5d:06:c7:
c4:28:7c:4d:be:80:1a:f9:88:09:37:be:9a:2b:7d:9c:1c:e7:
52:44:89:db:54:44:e3:ba:ee:6a:e2:7c:80:cc:eb:c3:f1:0d:
fe:5e:fd:ad:31:ff:10:fb:7c:5d:c9:56:65:46:59:dd:90:bf:
7a:3c:33:bf:ca:8c:8b:89:9c:87:c6:ad:eb:5e:17:e6:d6:28:
1f:01:55:21:78:17:12:32:94:c0:4f:fe:f4:39:d3:ee:f2:dd:
10:8f:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:13 2025 by rpki-client