Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: dJp/PcFnu75hn6Qjo5Zojn+Nol9dAdqk85GCq7K11CI=
Subject key identifier: 87:4F:B2:EA:A2:DA:66:20:63:A4:B5:94:AB:A6:08:B0:37:7F:3C:43
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 0198D5839D8B9CB4ADE0E351899E1849F842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: 9E0+wyRAXxdFbi07BPlIF53PTQcNVLl5dJ72fJ3BGXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9d:8b:9c:b4:ad:e0:e3:51:89:9e:18:49:f8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=874fb2eaa2da662063a4b594aba608b0377f3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:91:b6:e6:c2:d7:f5:78:e9:e3:17:2f:3d:
62:1f:30:10:02:cb:c0:27:68:d0:09:29:c0:22:37:
2c:0e:0a:22:96:b7:51:7c:bf:c2:61:6d:ff:53:2a:
be:b1:18:3f:af:4c:7d:6d:8a:f4:41:26:89:31:10:
20:fb:e6:98:75:98:54:05:9d:24:6a:15:aa:66:58:
fe:c9:96:e4:8f:a5:91:d4:21:1e:ab:5e:52:1e:c5:
6c:4e:3e:86:db:16:c8:87:3d:bd:7c:09:46:01:28:
97:48:92:c0:fd:4b:70:33:d0:3a:09:00:ff:f3:26:
07:65:b0:56:e4:28:64:88:28:5b:c7:8d:de:73:9b:
3b:db:f4:0f:7e:23:a2:08:9a:00:18:8b:8a:a3:e1:
a6:3f:df:77:35:7f:c8:9b:2d:e2:b2:f6:e7:c1:07:
4b:9f:3a:27:6d:f8:9f:60:f5:a3:0d:cf:d9:ca:67:
62:4c:ab:8f:6b:b9:f7:a0:df:d9:5d:69:ff:35:4f:
66:39:ae:21:c4:42:2a:51:99:a0:98:cf:1a:cd:7b:
fb:05:7a:2e:f4:29:6d:52:19:c2:88:21:58:c3:d5:
21:05:f2:80:a9:a2:5d:28:f5:b7:65:d2:40:0f:0c:
f1:a6:5c:3e:22:c4:c0:3b:5b:0c:6a:30:ee:3f:9c:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:B2:EA:A2:DA:66:20:63:A4:B5:94:AB:A6:08:B0:37:7F:3C:43
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:75:20:f6:e5:e8:9a:e7:70:37:ef:55:b9:2c:70:63:3a:
e1:e1:c3:69:18:a1:aa:96:4c:c0:e7:65:8c:47:fb:87:b5:e3:
12:f7:fb:c9:41:fb:8d:50:7c:7d:4b:8a:f0:57:f4:b8:c0:7f:
86:a8:da:a6:3b:1b:a3:62:a3:cc:d2:49:62:f1:91:49:ef:15:
66:92:cc:cc:5f:4a:f9:d8:d9:1d:a9:7a:73:c8:fe:e5:fa:ec:
ff:e7:7e:75:b0:eb:c1:28:6e:af:1f:2a:eb:49:3c:56:77:ae:
99:3b:e7:27:10:c9:ee:48:b3:81:77:4f:35:ab:e8:96:62:2c:
79:68:f8:4f:fe:d9:01:91:04:4f:2f:78:e6:d3:5c:e6:7b:87:
b3:d9:65:86:2d:25:44:87:62:e5:68:61:0d:cf:4b:3b:97:a3:
a9:75:0a:90:64:74:8e:bb:01:5d:e3:d8:be:ef:ca:3b:40:59:
d1:00:97:0b:34:c8:24:02:15:65:d6:b1:be:f6:15:29:5b:72:
dc:45:be:a2:cb:f2:9d:f7:7b:d8:bb:21:dc:22:50:97:cd:86:
d4:56:17:07:fc:49:06:50:ff:b1:d8:0d:5c:d9:70:dd:c8:d7:
fb:1b:90:32:6e:15:d5:48:54:62:f8:f9:64:d5:24:c4:09:bb:
a5:3b:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:43 2025 by rpki-client