Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: vjJvMp60HNo0K50344DS0J1pI3F2F0p4bZYH8A4tKJM=
Subject key identifier: 45:CF:AF:46:08:8B:64:18:E8:B0:37:95:3B:91:6E:EB:E1:32:3C:82
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0198D6CD3E9A17BE88D1DF62D2EE420BAE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: ZqkYgaW0QUvkPW/nVpdPULWZ3hG8xTX2RPoSLBG1m/8=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3e:9a:17:be:88:d1:df:62:d2:ee:42:0b:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=45cfaf46088b6418e8b037953b916eebe1323c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:8b:ce:1a:a7:bc:f3:41:5a:5f:90:f2:a4:
a6:75:a6:36:bf:9d:a6:5c:b2:7b:f0:bd:61:16:3e:
b2:6c:cc:d7:5c:60:90:a6:6a:64:e2:8f:77:05:70:
92:fd:00:31:88:5a:b2:e9:80:ca:55:6d:5f:57:7e:
43:49:60:27:17:00:77:e6:59:c8:d5:3b:e2:df:fa:
ff:f9:b6:ee:d1:40:c7:db:ab:4f:7d:54:c2:00:31:
8a:df:a6:7c:06:1b:05:fe:95:5e:dd:0e:90:30:a1:
8e:f1:b1:98:f3:a2:9e:d4:9b:45:b4:d6:93:4c:c1:
32:9f:84:08:5e:84:60:fa:c5:81:58:f7:0b:aa:36:
36:54:d9:b2:75:ff:89:dc:3f:56:1b:d6:a1:74:d5:
4b:50:cf:ff:f3:45:1a:a6:e4:f4:5f:f2:71:d2:a2:
51:55:bd:d2:8f:08:43:18:38:aa:1b:e3:40:04:68:
4e:ff:f1:7f:d1:bf:f8:ee:07:b1:96:b2:af:8e:11:
17:3e:59:95:ee:4b:d6:0e:14:28:53:d3:f1:e4:db:
e3:ba:93:f3:6a:e9:1d:f2:15:89:99:14:5b:79:fb:
95:ab:a1:7e:f2:8b:82:d3:63:cc:34:31:c0:0c:90:
02:6e:24:43:5b:4f:4e:95:03:05:06:45:ac:2e:17:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:AF:46:08:8B:64:18:E8:B0:37:95:3B:91:6E:EB:E1:32:3C:82
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:92:82:c6:c5:b7:55:b1:4d:aa:1c:cd:19:ed:0f:d0:24:
1e:3b:08:f5:83:62:92:fe:92:03:e7:17:61:3c:f4:b4:79:ba:
cb:c0:30:c1:60:ac:f9:da:4e:b8:d5:d5:19:96:65:de:43:b8:
a9:68:a0:d2:db:48:3c:23:db:7b:b6:98:05:19:be:1a:ee:1e:
66:f0:d3:7b:58:28:58:a3:df:3f:82:38:f0:23:dc:1d:aa:2e:
b3:ff:bb:42:e3:00:9d:0a:93:6b:34:bb:16:13:ed:51:8d:b4:
14:be:46:06:7e:50:ce:4b:70:3b:2e:a0:b0:f2:e2:a5:8f:6a:
b6:f7:ec:7a:b3:cb:98:64:fc:77:ad:b9:58:2d:36:47:e5:21:
4a:e9:e2:fc:01:5d:6f:26:0a:ad:04:e9:52:8f:fd:28:60:92:
64:f3:b6:e2:eb:73:73:76:52:83:4e:99:19:b9:9e:b5:e3:32:
63:c7:f4:7d:91:e4:16:a1:34:d1:8d:b0:f1:92:23:ca:5c:35:
88:20:d3:f0:cb:5f:e0:95:4a:a3:39:9e:98:87:dc:0a:74:1e:
db:69:37:dd:89:0f:ba:33:64:22:5f:3e:ae:95:fc:9d:30:79:
b6:bd:a7:4b:46:1d:cb:f6:5e:0e:7a:f6:25:02:db:49:95:02:
55:35:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:48 2025 by rpki-client