
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: HBPSbM3Luu2bg8sEbZdrsYngBYyWKsUZRkgaZjzpi3o=
Subject key identifier: 5E:80:B1:C9:70:46:5B:C5:EB:C0:DF:57:6C:5E:D2:F7:A9:6D:7D:37
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 0198D65F37F7E24B5B6DB8568E5A2967A294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: IouRTIGaNaeuGMRNZP3TOBSqa1ptnbo08s80BC/mq7Y=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:37:f7:e2:4b:5b:6d:b8:56:8e:5a:29:67:a2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=5e80b1c970465bc5ebc0df576c5ed2f7a96d7d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:51:74:2e:71:67:e8:f6:29:70:66:91:dd:
fa:f1:99:a9:5b:37:d9:c5:92:20:50:c1:f7:b0:93:
61:eb:35:1f:61:da:1a:c1:5e:b7:29:c1:f1:9b:6a:
54:4b:3c:4f:76:97:c5:23:07:7f:4d:2c:59:d2:aa:
b7:d0:7e:e7:4b:07:88:2c:c0:fc:a2:15:2b:b7:c9:
3c:58:89:57:5d:71:54:7a:7c:d9:b4:d6:e1:d4:d9:
6b:11:ac:82:3e:3b:ba:fa:03:39:06:57:e2:25:d5:
ae:ad:90:af:2a:9f:38:44:87:44:c1:bb:5c:07:f3:
e1:1e:2b:87:43:4b:d0:07:6a:3f:55:9d:a5:6f:53:
73:19:e7:54:2c:51:2e:bf:44:d5:a0:c4:4a:a8:38:
15:8e:e7:a4:1e:35:25:2b:63:7e:d7:33:7e:d3:1d:
ef:66:42:c8:84:4f:b4:53:a1:cb:d6:82:3d:2e:91:
51:a3:e6:4e:71:0f:3e:e8:0a:a6:14:26:7c:7d:82:
b6:5d:7a:cf:01:4c:32:ea:6d:8d:49:9d:d3:30:0c:
ce:0b:3f:75:ac:a8:be:f1:47:a1:9c:d5:b2:ab:ae:
b3:59:4e:ac:4d:a0:7f:c1:1e:ce:64:f5:fb:88:2d:
df:11:f3:7a:53:72:c6:ea:99:bf:67:f5:fc:79:b3:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:B1:C9:70:46:5B:C5:EB:C0:DF:57:6C:5E:D2:F7:A9:6D:7D:37
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:1c:54:92:96:1a:c8:0b:56:40:f7:6f:58:22:73:5e:41:
a2:b9:40:12:8d:a5:fd:ce:51:83:47:31:8e:c6:01:76:4a:b6:
fe:62:9d:de:95:5d:ae:51:e0:1f:eb:13:68:bd:d4:18:58:93:
b9:be:8f:16:d6:a3:9c:23:e9:10:05:1b:08:59:7e:95:e5:1f:
7a:94:48:65:c8:d8:f9:7c:74:ac:1f:96:08:9c:f8:c8:09:b7:
e2:cd:43:13:51:c7:42:89:54:e0:c6:57:ba:85:22:8f:74:9c:
58:7e:8e:e1:27:6d:7b:d2:07:a3:e9:a0:a3:c2:40:ee:f8:27:
58:9f:ed:fe:c3:73:8b:77:45:e4:e3:7b:94:6c:08:1c:7c:c4:
66:8b:7a:fd:9c:d4:da:6f:17:11:a1:2f:d7:79:92:38:fd:68:
92:c4:62:3c:7a:b1:57:7c:a3:69:c2:fc:22:8d:b6:13:64:52:
98:e2:8a:71:c6:00:48:ce:59:b8:0a:84:52:17:ce:c4:12:ff:
78:f8:c0:79:b2:72:58:a2:f7:6f:f5:46:40:f6:80:85:08:e8:
99:37:ef:b7:8a:34:4e:61:fd:9e:24:2e:47:0c:3f:c8:e6:f7:
8c:a7:69:64:8b:2c:51:df:a8:17:62:c2:84:99:23:f4:c5:fe:
fa:9a:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:13 2025 by rpki-client