Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: yAu/Z8Z5saE900MKwp8f26MkSaV0KKNbFOqoTzawZBg=
Subject key identifier: 27:67:2F:94:F0:8D:90:9D:9A:DA:70:FD:66:25:86:40:89:EA:F7:CF
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0198D65F95CB870522BCC3EDA0037C23AE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: CslO4zqLcJX3py3DepUcx6DAEpN4m9BZ0HSsipnmIso=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:95:cb:87:05:22:bc:c3:ed:a0:03:7c:23:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=27672f94f08d909d9ada70fd6625864089eaf7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:7c:72:15:56:85:a7:11:a1:fc:a3:c7:d9:
c9:ce:00:b1:04:63:02:00:1a:b9:75:a0:7c:92:6e:
9f:90:a7:59:2a:ac:f2:22:e3:cb:d3:17:8c:a0:14:
23:42:7e:21:8e:4f:ca:3a:39:45:62:a4:01:02:d9:
ae:f9:1f:41:30:fb:6c:55:08:e5:f4:34:3b:75:71:
1b:a2:98:ff:e7:f6:48:78:4f:8f:7f:5b:43:cb:81:
23:f3:12:89:5d:2b:b8:df:fc:82:fb:01:f0:d9:6e:
88:63:c5:2d:16:08:bb:71:a7:14:33:bd:7d:2e:83:
8f:03:e5:b0:9a:b4:54:38:11:c6:63:c0:40:30:0b:
d8:3b:aa:c5:4a:82:f4:24:09:ed:c2:d6:22:41:5f:
16:6a:e5:31:5a:bd:fa:c9:94:a8:24:83:91:ec:42:
d3:28:88:dd:2c:25:b7:10:15:67:89:57:76:b6:92:
d6:42:45:66:7f:5b:6e:7c:3a:c4:ee:db:62:06:3d:
07:36:17:75:fb:4d:69:84:1c:dd:29:79:04:67:15:
ce:52:84:25:e0:44:f8:67:9e:d8:bc:b3:00:75:2a:
3d:07:ec:62:7e:69:bc:62:25:b8:ed:27:b9:98:2d:
04:1d:d4:24:88:6e:39:3d:13:2e:dc:66:56:1c:ba:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:2F:94:F0:8D:90:9D:9A:DA:70:FD:66:25:86:40:89:EA:F7:CF
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:64:93:7a:4c:a0:50:6d:25:12:0d:bd:93:ef:5a:b9:49:88:
12:39:58:35:1f:cc:b9:19:a4:57:98:1d:05:a2:eb:87:79:06:
b9:03:f4:3a:59:c3:d0:e9:bd:11:2a:12:c6:71:ce:ad:01:d4:
b6:28:94:76:02:83:35:89:f1:18:b6:aa:49:38:a8:e4:f7:4e:
90:3c:09:30:37:c1:2f:17:40:39:95:60:f4:15:ae:c0:bb:92:
32:a4:a1:b3:58:6f:2b:f1:81:8b:3e:f8:2e:0f:46:57:fa:ce:
b9:81:de:0c:b8:ab:31:e9:8e:a7:de:c1:9c:6c:77:86:db:06:
f3:eb:44:f3:00:49:ee:dd:a5:93:4a:37:50:9f:89:0e:55:f8:
2f:da:ea:a8:48:6b:52:eb:f6:cc:18:37:6f:b3:f9:22:df:61:
21:16:27:86:55:df:f0:9b:b8:07:b3:b5:68:cf:6b:84:35:17:
2c:95:fa:cb:3a:46:ed:44:aa:9b:76:17:ac:78:55:9e:1e:07:
7e:74:b8:ca:13:32:7d:98:a4:a8:2d:90:76:75:08:8f:2e:b6:
42:73:98:92:48:1e:1f:63:f8:0c:72:2a:b8:9d:e3:4c:ae:5d:
bb:d4:59:9e:0c:5e:31:d1:9a:1f:5f:23:cb:5d:37:e0:e8:9f:
a3:72:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:05 2025 by rpki-client