Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: DKYSY9B24RvqzqNH2ZcTHHs5mmQrlc/xRiIY6MRNvRM=
Subject key identifier: 1F:7A:34:E6:70:E1:B8:09:20:4F:73:AA:C0:3A:C7:C8:C8:2F:22:A1
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 0198D6CCE7C1EF90D8D1BB70D1EE6C32BF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 166B
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: aI311AdI/k9qQuWd30lZddkaKrHB0LVwD6PztrXSGoU=)
5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e7:c1:ef:90:d8:d1:bb:70:d1:ee:6c:32:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=1f7a34e670e1b809204f73aac03ac7c8c82f22a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:ba:71:de:a3:2e:ea:64:1c:d2:9d:10:ca:
7a:71:2c:12:ac:72:23:26:0e:fa:f0:83:c1:77:cf:
1e:e4:9d:0e:53:88:21:aa:c0:b6:5d:0f:d0:c8:62:
69:6e:e0:ae:6a:86:50:0a:4e:7c:64:bb:1f:2b:c9:
fa:3d:cd:fe:49:c4:52:47:fd:2e:80:66:29:03:5c:
35:98:09:01:04:23:af:21:90:94:36:5f:f1:11:c6:
b5:ab:38:b5:9c:b0:f8:e9:af:73:3d:4f:39:77:ee:
3c:da:8e:9a:52:a1:b1:e1:82:ee:99:d8:6f:6c:f4:
b4:f8:cf:3a:3a:98:48:74:f9:cf:39:be:83:bb:34:
41:ce:f2:56:51:b5:a4:e9:29:58:07:11:8b:78:3c:
61:ce:d6:1f:ec:e2:67:74:0f:50:18:19:76:9d:62:
d6:74:49:10:74:67:71:13:ab:02:19:58:0a:6d:ce:
65:36:55:77:77:dd:dc:6b:a7:9a:50:f3:ad:46:c7:
01:fc:7b:8e:5c:d5:e9:a2:0b:2c:48:e8:2d:dd:db:
53:be:be:14:8f:18:e1:59:60:ee:49:d0:26:f3:e1:
15:bd:da:00:1d:b1:3c:38:8f:d3:23:cb:c6:ec:ef:
57:e2:7f:93:ee:0e:72:26:fe:af:b7:d5:6b:7d:f7:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:34:E6:70:E1:B8:09:20:4F:73:AA:C0:3A:C7:C8:C8:2F:22:A1
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:29:88:95:a7:0c:d5:98:12:97:ae:e8:ae:f3:7e:44:e8:
68:7a:14:6b:06:c2:10:1f:34:61:aa:75:70:7d:de:8f:39:bd:
87:3e:c4:7f:49:e4:4b:a9:61:f4:22:ac:12:4a:28:59:6e:54:
7f:1d:67:ad:3a:ed:df:f9:f3:8d:04:c1:3e:75:18:ae:a8:61:
60:a9:e0:3a:32:db:b8:c7:54:c7:61:bf:d6:7f:82:f7:52:ce:
db:81:ec:c7:7c:c0:c9:9a:ab:ce:76:2e:62:22:ea:9f:96:ba:
22:a9:75:a6:7a:fc:2d:1d:7c:b3:f9:90:4f:da:bc:17:07:30:
7a:5f:d3:f3:be:1d:60:eb:8a:18:58:fc:19:95:32:72:3d:0b:
7d:b0:f8:51:c5:6c:78:28:d2:ca:44:c8:b7:4d:45:0f:4f:57:
c0:5c:41:36:02:9c:a4:df:48:0e:a1:44:55:c8:0d:e4:00:a3:
d0:59:cc:04:6d:25:6b:d3:23:cc:f4:e2:61:7f:c4:db:e6:5c:
5a:f5:48:18:cd:fb:ad:3e:20:51:3f:1c:a6:ea:9f:89:37:11:
a9:48:66:69:66:fa:32:74:14:13:5a:d2:04:05:b6:39:55:2a:
2e:77:2d:f7:64:78:1c:e4:8a:5c:4c:0a:98:a9:38:15:42:fa:
35:60:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:21 2025 by rpki-client