Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: C0u9rgh6uycrbT1bCbHrrzq4CVPogdmW0n4RI6Hfq1M=
Subject key identifier: 23:9C:96:99:AB:42:F1:83:7A:3C:1F:05:03:F4:03:C9:2B:3B:91:FD
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0198D7731EAD578F5ACEA26421A0F398C38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 15:01:42 +0000
Manifest this update: Sat 23 Aug 2025 15:01:42 +0000
Manifest next update: Sun 24 Aug 2025 15:01:42 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: FT2EvpP+FuwadjAJSiOgHud61Ekj/u2qMOY2DWDHviI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:1e:ad:57:8f:5a:ce:a2:64:21:a0:f3:98:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Aug 23 15:01:42 2025 GMT
Not After : Aug 24 15:01:42 2025 GMT
Subject: CN=239c9699ab42f1837a3c1f0503f403c92b3b91fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:ac:28:17:97:5e:2e:a5:65:eb:cf:16:43:
52:9f:75:e4:07:6d:f3:71:a7:ce:2c:b7:53:31:45:
23:8a:b7:7d:e6:67:31:ea:d7:ca:ac:d5:ff:73:f3:
5e:5d:8a:d0:be:00:f0:3f:ba:44:82:28:e2:57:77:
54:84:12:2f:12:b6:07:78:35:4b:fc:2a:ab:dc:37:
05:01:43:88:b6:d5:a3:02:4c:a1:eb:72:58:b2:45:
d3:b9:62:ce:d9:43:e7:fb:c5:03:77:50:e6:5c:11:
5e:5b:aa:4e:85:02:53:13:b5:be:09:3d:3f:45:08:
4c:85:7c:73:44:19:fd:12:6a:78:74:bf:54:51:1e:
f3:77:14:57:07:31:04:12:7a:36:07:f6:38:ce:6e:
a6:80:18:19:c2:8a:ba:ab:ed:58:9f:f2:79:48:89:
58:e0:0e:a5:ea:16:4b:c1:18:4f:50:bd:7e:0f:50:
4b:8c:a2:39:4f:64:bd:9d:ca:93:66:96:fd:43:26:
49:23:36:51:11:2c:01:ad:02:99:38:a9:fe:4f:70:
6d:ea:9e:b7:a1:5f:3b:5c:d9:3c:20:5e:10:f0:3d:
3d:fa:0a:1e:97:6e:15:1f:f5:10:6c:74:3c:8f:47:
bb:33:ce:9b:e6:db:bf:cc:7e:72:ab:fc:45:fb:93:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:96:99:AB:42:F1:83:7A:3C:1F:05:03:F4:03:C9:2B:3B:91:FD
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:26:a2:01:82:4f:06:1d:52:77:87:17:b5:0e:8e:87:35:17:
65:a5:42:3d:6f:d9:6c:7c:19:d2:5f:f1:cc:94:93:d4:12:cb:
2b:3b:4c:bb:aa:fa:95:f1:8b:4b:31:ee:e1:42:e0:73:c6:a4:
8a:ee:ec:a3:56:61:8d:42:e3:56:6a:66:43:40:68:6b:91:e2:
a4:5c:d2:a9:1d:49:75:3d:9f:ff:82:e5:0e:2b:a7:89:b5:c7:
94:6c:da:cf:8e:5b:8b:77:db:12:d4:6c:cd:7b:21:70:ce:59:
02:d6:da:af:1d:5b:a6:f9:f7:dc:19:79:1f:80:14:54:b3:5c:
a5:96:c1:c5:d6:54:b9:b0:91:dc:4c:ba:b2:c2:7e:9a:41:5f:
19:ba:bd:76:8e:44:d5:0b:05:89:c4:c9:ab:ed:1c:fa:4b:8c:
16:fd:af:62:16:a7:0d:8b:9f:a4:66:c8:72:b8:81:f0:be:95:
3a:a3:37:54:cd:4c:9c:d3:d7:3e:fc:5f:9f:e4:8e:00:cd:13:
14:e9:f8:ec:91:fe:12:d3:d9:6a:56:97:e6:cf:d9:2b:ca:85:
79:c5:19:f1:f4:30:ba:36:56:20:a8:f0:09:6b:e3:d9:f0:0a:
ee:ec:ee:2c:af:72:d7:5a:b0:fd:6f:a8:23:7c:94:01:65:2b:
a5:03:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:46 2025 by rpki-client