Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: La3pawiuuajAvYV7F2nqJ7ymqf05eGbdVXApw98SMpQ=
Subject key identifier: 50:BA:92:21:18:5C:DC:C2:BB:3A:FD:D3:D9:1D:D6:E0:23:05:7D:1B
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 0198D5BB7A1C526B382EB9C4242F059D6FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: upsPCphmFfP53jRZDRaW+Ww8PoNHRf+POXGd4yZ3sc4=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7a:1c:52:6b:38:2e:b9:c4:24:2f:05:9d:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=50ba9221185cdcc2bb3afdd3d91dd6e023057d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:f5:08:6e:ba:e8:0b:b7:1a:aa:da:4b:f4:
fd:23:1d:97:3e:30:78:74:d6:b1:b4:27:39:b0:a2:
73:66:f7:44:b5:cb:62:e8:2d:c9:79:bf:85:cc:5a:
4b:1f:dc:5a:72:e1:a1:72:da:9c:3a:fa:b8:be:fe:
d6:ef:94:62:18:da:32:ad:71:e9:f5:68:3a:c4:6c:
29:52:8a:d6:04:a0:07:04:ee:e9:24:81:13:0a:f3:
3a:b5:47:bb:b7:bd:2b:b6:c3:c6:53:29:66:27:cc:
90:c7:7a:f4:c5:7f:fa:e0:be:e9:3f:06:a2:22:80:
17:ce:94:e7:50:5a:6b:c7:d1:c6:4f:85:4d:16:99:
94:91:3a:f6:14:04:e2:88:6a:90:eb:aa:5d:7d:5c:
02:98:67:17:b3:f9:85:5e:42:19:c2:21:82:a9:f7:
ec:0f:ac:f3:98:a0:2f:f7:57:f2:c9:f7:70:78:c8:
7f:6e:3d:e5:6b:79:b4:7b:65:71:9d:b8:5e:44:36:
0e:0a:57:cf:cc:1f:34:ce:e7:b5:79:d8:2b:f7:d6:
25:29:8b:56:8b:95:9c:e6:aa:41:35:ec:35:7e:82:
5b:69:18:63:4b:d0:1f:11:21:89:28:02:61:27:12:
96:c5:19:69:12:91:76:dc:82:37:33:04:dc:d8:40:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BA:92:21:18:5C:DC:C2:BB:3A:FD:D3:D9:1D:D6:E0:23:05:7D:1B
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:84:7f:a6:d3:43:68:ce:47:d1:e1:b5:36:0f:ab:51:c9:
19:52:4d:15:b0:1e:0a:24:a0:55:0d:8b:28:74:a6:df:23:15:
58:bc:8e:9c:e8:65:21:7a:a9:80:0e:60:04:13:07:3e:a6:16:
dc:b3:9c:6f:76:f0:50:52:ca:9c:fd:0c:c6:00:e2:62:30:76:
57:9e:7e:cc:23:6e:fa:d7:5c:e7:09:9f:1a:82:4b:11:67:fb:
05:6b:39:a8:32:8c:d0:e9:d4:a4:80:20:df:01:be:16:7b:4d:
a9:42:7d:bb:eb:3e:03:fe:04:0e:bc:0c:dc:6d:9d:15:fb:13:
bb:98:8d:ca:d7:e5:12:c5:cd:aa:25:fe:27:eb:9b:d6:8f:23:
cd:2b:35:e6:d5:45:6e:bb:18:e5:d1:43:26:e9:6b:c4:ad:51:
57:ff:9c:df:28:e9:9b:fc:52:59:47:f9:48:12:38:a3:6b:77:
34:04:07:9e:e6:16:40:72:17:db:42:24:9a:af:7f:44:84:ed:
32:df:99:cf:8f:9f:a2:cd:5a:da:51:16:95:3b:32:79:20:a0:
a8:63:e3:70:bb:8a:22:d4:99:88:4c:66:5d:13:94:cd:b3:d8:
7a:f7:d9:d7:d5:6e:53:72:d3:54:b7:94:ef:99:08:82:73:53:
26:1a:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:49 2025 by rpki-client