Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: 3ZtsS8YrDFu+/+a0wNOCp3he0ae+vTsBq/bTxWQrK0U=
Subject key identifier: 09:C3:B0:D8:AC:50:E9:0C:A7:A8:C6:1E:4E:9D:E8:C7:43:98:63:43
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0198D583DF85D49D87EC3EFF7C96C3FA9857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: 2i3JAJQ7zheUf7wM3U0HZDV53aL4QV0BTLEitFpBiG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:85:d4:9d:87:ec:3e:ff:7c:96:c3:fa:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=09c3b0d8ac50e90ca7a8c61e4e9de8c743986343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:01:9d:88:21:df:26:5c:04:1c:16:9c:3f:
ee:5a:bf:35:9a:ea:b5:ec:78:3f:3f:c4:43:aa:85:
8a:69:80:0a:5f:c7:a2:f7:cf:ef:5e:af:21:5f:ec:
03:73:00:20:fc:47:f0:bc:bb:62:be:66:df:43:ec:
44:6a:ab:00:18:10:83:10:a4:80:49:f5:57:3b:fe:
e8:87:10:40:4e:6c:ab:93:64:74:b1:88:a4:b5:10:
d9:96:c3:04:d0:1f:ca:d8:11:6e:af:53:99:59:8c:
17:94:4e:69:93:96:74:51:27:a6:94:a3:6f:c6:a2:
e3:f8:46:08:f1:e7:21:02:7b:88:08:64:34:92:97:
9f:24:40:b2:b4:9e:f9:58:30:5f:3f:3d:db:34:c5:
a6:95:b3:f4:67:da:b7:1c:bd:12:c0:ab:77:43:cb:
50:91:fc:1c:fb:c9:fd:df:be:0d:4d:ed:85:58:fa:
85:69:7e:e8:0a:c6:4e:8d:46:49:e6:5c:91:36:48:
11:76:8c:23:17:cb:99:79:4e:69:a1:73:cb:04:c2:
f0:50:af:bd:ae:fe:e0:1b:95:42:ba:41:3b:3a:35:
9b:07:05:53:57:21:46:e6:b1:b1:e0:ff:be:79:2b:
98:49:da:d7:c0:65:d7:34:57:36:d2:aa:2a:4d:21:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:B0:D8:AC:50:E9:0C:A7:A8:C6:1E:4E:9D:E8:C7:43:98:63:43
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:b6:68:37:90:d8:de:71:c7:9c:48:df:19:0e:98:7d:91:
9c:7b:ec:2a:57:3c:fc:d3:98:ad:06:47:15:05:4c:e8:2f:d6:
82:89:6f:fa:e6:79:00:5d:a9:ef:05:2e:88:4e:ed:bc:32:58:
44:ed:44:2b:4b:95:4f:9c:20:a7:72:f4:e2:38:0c:ba:5b:0a:
ff:bd:89:12:34:84:a0:28:b3:c7:9a:01:c5:42:83:b2:db:a1:
57:cb:0e:db:30:88:5a:95:f3:ff:a8:c2:35:8c:11:a3:4c:8e:
39:78:d7:80:68:87:0d:99:63:8b:d6:9a:b3:04:5f:4c:2c:59:
97:2b:25:be:df:d1:8d:e8:b2:56:61:63:ed:7d:61:bb:16:09:
5c:21:cc:85:1e:8e:14:4c:de:31:e3:49:e2:a9:f3:41:fc:a4:
63:ef:52:48:4c:49:13:ff:02:99:f8:7a:8a:b0:9a:49:50:ab:
2c:c3:53:75:18:ed:0e:2c:64:70:47:f9:fd:71:8a:56:60:f7:
d2:8c:5e:c0:1f:28:8f:7c:73:42:7e:09:c7:c8:0c:f9:31:bf:
33:04:f9:0d:93:77:2c:e6:42:a9:8f:be:90:cd:05:08:80:25:
d2:69:d4:fb:83:9e:19:83:3e:45:0a:73:72:96:f0:9c:72:80:
ac:33:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:44 2025 by rpki-client