Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: U9Ust2ym3XWVguBHW+BWJ9y+zi8/UOpr7B9KvX4a8To=
Subject key identifier: 40:C9:61:0F:A9:3C:0F:E5:6B:72:80:19:BE:E9:5A:51:68:F1:34:7E
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0198D583771C1A5126E05314E2A3E50AE885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: FsmwTh3NJS5Zacg/MzEmc//fp4eMV6oT+lxamgMguF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:77:1c:1a:51:26:e0:53:14:e2:a3:e5:0a:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=40c9610fa93c0fe56b728019bee95a5168f1347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:8a:b6:d7:31:3b:de:ea:81:d1:ca:96:5a:
48:64:b8:3a:8b:1c:87:8f:10:7e:10:c1:b2:9e:77:
02:a5:37:5f:99:9c:85:1d:2b:5f:2b:6b:ba:f5:a3:
ef:2c:b2:50:b4:4e:42:5a:4e:a0:08:2a:b0:18:f5:
3f:27:a3:64:28:eb:49:15:8e:a3:c4:18:ac:96:49:
cf:50:2d:cf:39:a2:b8:e7:93:df:ef:29:84:c0:eb:
f8:57:a8:f3:69:ff:a3:e7:55:11:dd:fe:67:c1:27:
b3:99:2e:de:b0:a2:05:e1:72:ae:cc:e7:11:70:84:
b2:6b:bc:b1:f8:d3:e2:8c:42:4c:4e:07:e6:6b:f4:
96:eb:ae:e6:f1:2d:4e:13:44:71:1c:d6:b0:2d:bd:
8b:91:c4:e5:7f:54:3f:18:4a:c6:c3:99:37:11:d8:
0d:5a:bc:bd:2b:8f:6a:d4:93:8e:a9:0f:08:c8:df:
1a:17:2c:a1:25:66:49:da:f7:05:b6:c6:52:28:2e:
68:70:f0:fd:57:86:8a:c0:cc:93:95:fc:e0:e3:dd:
45:5a:4c:5e:94:e7:54:6b:58:b1:3a:d7:32:91:14:
db:51:63:12:9d:ca:ef:2f:e0:d1:9d:f2:02:04:b7:
15:2b:07:89:3a:57:79:4d:0c:34:ad:c7:c4:86:ab:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:61:0F:A9:3C:0F:E5:6B:72:80:19:BE:E9:5A:51:68:F1:34:7E
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:04:c9:6a:95:1f:53:be:20:3a:86:c1:0e:40:bc:1b:b0:
0a:4f:95:29:f1:c4:99:53:f2:c9:d5:dc:7d:43:62:10:27:4c:
37:17:5d:7c:4f:38:a0:81:01:74:c5:2d:fc:9c:26:30:99:d0:
df:f4:7b:3f:ce:79:a0:0d:69:c6:f4:87:ad:07:88:2e:65:16:
65:e6:0b:09:18:9c:91:d3:1e:e7:ed:0f:d3:28:f9:6f:4a:de:
5c:30:aa:35:37:66:7c:7c:14:d6:6e:28:24:1f:18:b1:24:f2:
59:3f:2b:69:8b:ea:c2:35:f3:2d:3b:84:5e:fd:4b:35:e3:fe:
a3:40:3b:52:c1:a9:72:cd:e3:7c:ff:c6:3d:d7:35:12:01:e6:
64:11:3c:9f:9a:f8:30:7f:a9:60:52:b0:a8:b5:1e:50:2f:b8:
d3:8d:1e:af:f4:9d:75:bc:90:86:63:37:53:bc:3c:f3:3b:4b:
f4:20:a7:51:8c:ad:87:f9:1a:71:bf:3f:ce:4a:91:26:fe:dd:
42:45:3c:94:cb:09:8d:26:6d:ab:87:06:d9:54:82:f1:72:64:
b2:89:ac:6c:17:fd:f3:da:02:73:d6:7d:3b:d8:a5:d3:f2:8b:
3c:68:e7:d4:29:60:1b:6c:25:e1:70:01:27:87:46:19:5c:02:
6b:c9:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:48 2025 by rpki-client