Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: 7tNPvvzPfZjYS4oH25VCvKwKUORfpJ1fs7Ng2W0NKqw=
Subject key identifier: C7:89:8F:92:3D:85:22:C7:71:4F:9E:C7:DD:CD:56:BB:4B:46:2F:CD
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0198D5839BC3D8D069F9C237F6DC425E6004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: QUVRKszp2oZulTzftYX4Qa3kbhpaOQUF6eKLiVKIvTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9b:c3:d8:d0:69:f9:c2:37:f6:dc:42:5e:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=c7898f923d8522c7714f9ec7ddcd56bb4b462fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:99:87:30:76:83:43:17:52:84:cb:1e:59:
f0:bd:21:71:0d:6f:0a:19:f3:a3:63:9d:ca:08:36:
a2:a3:bb:d7:62:87:13:2b:dc:92:7b:89:40:24:43:
7e:b0:6e:d9:82:1a:df:9f:25:d7:f0:75:51:51:3d:
58:2f:e3:44:36:12:09:d4:1a:6e:5f:7f:d2:d5:7e:
59:74:20:8a:39:ce:8a:d5:3d:60:ec:d4:09:48:b8:
2f:59:de:24:59:02:16:54:16:a8:06:43:9a:3b:dd:
2d:53:ff:4e:35:60:48:d6:35:ad:4e:83:5c:dd:84:
ce:d5:a7:7f:b7:08:d6:cd:de:b3:85:d8:28:31:15:
a5:3d:08:12:c1:52:9a:87:5e:f3:90:ae:f9:c9:78:
d0:3a:29:8f:86:3e:0b:af:1a:c0:3b:4d:b3:e5:50:
51:f3:ef:0f:d2:55:9b:c4:8f:41:5c:f5:5f:5b:c6:
10:83:da:44:4b:b1:dd:83:f3:38:d7:06:51:f7:6d:
97:87:81:dc:20:15:db:ef:bb:7f:94:53:e1:61:7d:
55:47:ee:77:39:32:8a:38:b2:2a:2b:10:09:b8:94:
65:0c:d0:02:05:7b:bc:76:39:be:22:54:8a:5a:de:
a3:61:40:e2:8b:af:4f:d0:87:ec:af:b3:e6:ab:c6:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:8F:92:3D:85:22:C7:71:4F:9E:C7:DD:CD:56:BB:4B:46:2F:CD
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7e:72:d9:02:35:46:5d:e4:01:67:a6:e8:f4:7a:d5:7a:23:
50:8b:3c:90:f1:15:1b:9b:e8:f7:7b:18:49:d7:01:89:da:02:
3a:0d:b9:c8:5c:8b:e2:9d:d3:90:3a:60:1d:46:4e:83:3a:24:
01:4b:7e:34:d2:18:23:94:c2:07:f1:4c:bb:bf:b5:32:90:de:
f6:21:fd:12:56:63:24:25:57:2f:5f:1d:6b:87:c1:0f:eb:89:
ab:5c:bd:5d:30:c6:9a:c3:5d:31:02:2b:b4:fc:90:d9:2f:5c:
a8:14:10:ee:96:b2:b9:f2:30:41:5a:7d:9a:36:bb:ef:59:0b:
75:cf:3a:f5:71:3e:82:55:02:ae:eb:9b:75:e5:f9:96:db:bd:
18:00:28:0b:8b:7e:3c:f2:79:e1:ba:cb:23:78:19:6d:66:9d:
74:5e:90:3e:23:14:7a:8d:71:8c:4e:c7:c8:b2:30:a5:c8:d8:
66:33:47:90:58:4e:84:3b:a2:6a:c7:e7:31:fb:70:b7:f7:cd:
14:c7:e0:a3:fe:00:83:dd:55:a3:54:d5:28:ec:87:56:9a:3e:
37:23:c7:94:86:39:12:31:e1:28:04:20:58:9f:1e:59:0f:fd:
cb:be:20:10:f7:47:a1:d2:e9:db:9a:58:b4:d5:59:4a:1a:1e:
c1:2d:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:11 2025 by rpki-client