Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: a5gROVt2Ye3HCeNl4SaQz3h0lrqcH50BD3NclrP2ia4=
Subject key identifier: 9E:E8:40:79:CD:9B:D4:BE:8C:C8:A1:85:CD:69:27:69:5A:8D:8E:F9
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0198D6CCEC4785FE2B0B43372E7853EE8471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:10 +0000
Manifest this update: Sat 23 Aug 2025 12:00:10 +0000
Manifest next update: Sun 24 Aug 2025 12:00:10 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: HsqW5yuP6FmaUGTnVNYLoavTTZ4MktnfqIPyDgtMiuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ec:47:85:fe:2b:0b:43:37:2e:78:53:ee:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Aug 23 12:00:10 2025 GMT
Not After : Aug 24 12:00:10 2025 GMT
Subject: CN=9ee84079cd9bd4be8cc8a185cd6927695a8d8ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:66:a6:c7:85:10:ea:04:00:e8:e2:b3:5f:
b8:8b:d0:06:3b:1b:7e:68:d4:c0:e2:30:06:6f:f5:
9b:32:41:66:1a:d1:2f:a4:93:8e:20:ad:97:c2:02:
02:03:8d:f9:40:14:64:95:f1:7a:a8:dd:5e:b4:bc:
0d:08:dd:af:3c:80:e8:d3:ba:22:ae:54:82:1f:14:
97:60:fb:37:43:bf:51:32:d9:9b:12:0f:40:9f:41:
b5:63:b0:42:e3:92:a9:55:d3:5d:36:fd:37:af:1f:
3b:a9:ef:0b:37:3a:83:ef:5d:0e:7b:c4:8a:4a:23:
f6:82:3f:83:c9:3f:a4:0b:83:4d:5a:cf:2e:45:87:
89:e9:19:ec:56:3d:8a:4f:53:ac:89:5d:53:c8:06:
d1:c4:a8:8b:f9:59:f7:b7:38:59:55:93:cd:e4:a1:
b7:3a:00:20:30:6f:7f:7e:3c:6d:e4:73:25:aa:fb:
ce:bf:20:ff:9d:5f:a4:4b:73:6c:8a:66:f3:aa:c4:
7d:9e:7a:19:03:80:59:d2:4d:6a:4f:cc:97:98:75:
52:05:98:7f:ac:e9:c7:78:49:96:32:82:a9:2f:db:
3c:8f:fe:07:39:08:31:bb:b9:14:60:96:14:39:24:
95:3b:a9:a3:f1:65:4a:30:44:0f:f7:25:e0:8b:a5:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:40:79:CD:9B:D4:BE:8C:C8:A1:85:CD:69:27:69:5A:8D:8E:F9
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:54:dc:fb:02:bf:e6:70:de:ba:6f:a8:e6:8d:f6:42:33:
8b:44:56:46:b0:9a:92:f0:94:2b:81:12:b0:cb:6d:d5:a5:13:
a7:ba:94:63:ba:b7:20:63:99:ca:06:30:9d:8a:d1:cd:0e:a6:
e8:9a:da:29:f4:04:5e:4b:b6:c6:45:a4:bb:ea:7b:f4:da:9a:
43:58:57:ad:0e:27:6e:7a:a9:ed:eb:cc:65:f3:c3:34:1c:0d:
7c:06:51:15:a4:94:0e:ba:21:32:ce:96:e8:9d:65:42:9a:b3:
bd:05:f7:37:ce:d3:0e:c5:c9:3e:19:51:f9:b1:3f:c4:da:76:
67:fb:65:4a:67:b9:3d:22:74:12:99:f8:95:d5:df:ff:b8:9d:
67:5f:07:ec:f1:99:f7:3b:74:e6:f5:e6:84:63:74:e3:32:06:
e9:07:65:5f:71:3c:2e:63:75:58:ea:09:fd:af:a3:2f:f5:52:
89:df:e5:74:01:ab:fa:11:80:4a:52:24:8d:f0:5b:fc:a3:76:
c0:9d:45:90:22:33:93:d4:97:c4:65:11:8c:b9:5d:35:5f:95:
68:92:da:69:2d:47:51:32:b7:08:9f:a4:47:dc:3e:e4:4d:ef:
95:51:41:37:b0:ea:db:52:46:dd:4f:8e:0c:e9:0b:73:d1:d2:
a9:04:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:42 2025 by rpki-client