Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: lEuu4ZpsAtvkMDinJ7yCzIZTdEIkr/gL3gTvfuycC30=
Subject key identifier: 34:A5:5A:73:63:A0:F7:D9:B7:13:07:60:B0:0D:C9:EB:1E:F5:BC:78
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0198D54E7E47C72867DA29D71CE1AC31374F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 165F
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: YAlgCfVf5o0Xc0XyAQlxxvkoIYJWYqEPeiYLf60wox0=)
2: TTyBFlONzzXm0ptuP31bT9pIB5A.roa (hash: zH1LUEGdx1jyJvNkyIxUsXv1WR3LtQqIOtsInn9MhZY=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7e:47:c7:28:67:da:29:d7:1c:e1:ac:31:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=34a55a7363a0f7d9b7130760b00dc9eb1ef5bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:83:91:b3:c6:dd:18:bc:50:d2:71:3a:45:
62:27:24:fb:c1:ba:88:39:c1:ba:8a:1b:45:33:f7:
0b:5b:46:26:47:7f:dd:2b:11:5f:f4:fa:f2:6c:79:
88:8a:94:b6:a2:54:c9:cb:a7:63:83:5f:74:93:3c:
78:44:7d:69:05:45:ee:5a:63:53:e1:0d:6e:39:e9:
fd:ce:53:0c:39:a3:bf:67:7b:23:c2:1e:35:99:28:
d2:51:88:a0:f0:12:79:20:99:15:b4:37:49:74:2e:
e4:3f:06:39:26:2e:f0:7b:ab:0a:f2:9d:20:bd:2f:
0f:b1:ff:23:31:0a:c1:04:9b:ee:9d:20:14:f9:a8:
dc:c6:60:77:3c:a4:88:60:f7:85:91:a9:46:13:22:
4d:99:64:0b:cd:00:03:aa:66:d6:21:57:13:b8:8b:
cd:a7:8e:7b:1b:74:a5:52:0b:e9:8f:25:fd:f8:09:
d0:9e:ea:13:6e:1a:b6:ed:24:80:75:15:92:e3:69:
03:50:21:10:66:12:c4:00:5e:83:d7:28:56:dd:53:
ae:f2:72:69:6b:8f:de:0c:e0:27:98:e3:d1:f3:0c:
ee:34:fb:99:c9:7a:2b:81:b9:1f:e1:ba:89:b4:8f:
36:b0:14:57:e7:3a:22:5e:b1:69:55:68:04:6d:17:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:5A:73:63:A0:F7:D9:B7:13:07:60:B0:0D:C9:EB:1E:F5:BC:78
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:58:5c:54:ca:4f:cc:a0:12:62:c7:14:bc:02:d4:ee:e9:fc:
8a:c7:c5:59:d8:c1:38:f6:97:65:26:fc:78:11:6d:32:28:96:
6c:6c:79:9f:05:18:25:29:21:fb:e2:a6:5b:a7:89:9b:bd:e0:
84:d0:ff:78:5a:bd:07:24:d7:92:7f:68:25:33:0f:06:22:b0:
9d:d5:b8:f4:39:88:15:f6:95:c4:3b:25:bb:c4:b3:a3:ce:f5:
3f:fc:d1:32:d8:d7:36:0c:e1:80:2e:ba:de:dc:98:f2:28:98:
60:ad:3d:fe:2e:3f:96:f3:28:56:90:18:ea:3c:55:1d:69:b5:
d6:27:80:4c:34:34:3d:16:50:91:f2:4c:9e:1c:71:aa:d6:b4:
d6:ca:93:78:0c:49:e4:4e:8d:b4:21:64:11:72:54:fc:c4:93:
65:87:2e:30:85:96:a0:4e:fe:bc:22:5b:43:85:35:10:0a:da:
b3:b7:87:84:da:3c:6b:7b:8f:47:f8:ba:d5:92:ef:77:04:7d:
c9:63:f0:69:a0:6f:61:67:39:1e:de:43:ac:e7:16:ef:71:f7:
85:59:4a:62:a7:4a:db:63:d0:f2:51:61:89:8f:ba:2b:44:ca:
12:cd:7a:32:bd:5d:91:c3:65:39:43:e6:70:f0:86:25:39:47:
ed:ba:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:28 2025 by rpki-client