Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: xPydL3p51RZxp1FIuk0HqS5NqxTR+YRUsgFz3/5XynA=
Subject key identifier: 7A:6E:BF:DC:0A:95:00:4D:2D:38:CB:07:3C:45:69:2B:01:F2:83:27
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0198D4E0BF72ACBE2AF921451882A1FC6136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:35 +0000
Manifest this update: Sat 23 Aug 2025 03:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: nilqwTdu2qcN0kuOO6quHPGyHXrJmyua8R6RUKeLUtM=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bf:72:ac:be:2a:f9:21:45:18:82:a1:fc:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Aug 23 03:02:35 2025 GMT
Not After : Aug 24 03:02:35 2025 GMT
Subject: CN=7a6ebfdc0a95004d2d38cb073c45692b01f28327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:01:63:7c:76:61:9c:6d:4d:f8:ec:fe:68:
74:2c:b3:71:8d:95:3a:12:7b:47:ee:dc:b6:ea:fb:
39:ae:70:e7:e1:ed:b0:f3:ad:47:61:b7:bc:94:42:
a4:dd:b2:30:61:62:7a:66:d8:73:29:40:61:a3:b5:
5b:d0:4d:b0:70:a2:af:f2:35:3a:10:96:25:56:73:
b0:41:82:8a:6f:89:d4:33:4e:52:bf:47:39:30:d3:
63:10:4f:32:14:65:c6:30:8b:83:32:03:99:b5:cb:
a6:f5:0f:a1:a3:8d:0d:9b:f0:1b:fc:64:13:d3:ca:
ae:b2:ae:1c:b7:7e:9b:e0:6f:6a:90:1e:09:74:4c:
62:f1:10:92:2d:7a:80:ca:19:2b:ae:ec:19:45:5b:
9e:92:39:25:db:9e:f7:7a:87:8c:fb:26:e9:bd:2a:
a6:df:7b:c9:a9:8b:2f:97:1c:e3:e7:f1:b3:4b:01:
96:ee:86:5f:85:d1:6f:cb:14:5e:71:71:ca:94:e8:
e5:9b:12:4b:8e:4e:c5:01:14:f0:d0:6c:93:ef:8d:
c3:94:01:ac:c5:b3:36:b3:2b:be:27:2a:6e:5a:ff:
6e:2b:14:c3:dd:15:ec:c6:ae:40:4e:ff:e1:18:40:
46:df:e7:7b:e6:19:7b:e9:c3:c2:e3:90:1c:f8:58:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:BF:DC:0A:95:00:4D:2D:38:CB:07:3C:45:69:2B:01:F2:83:27
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:5f:1e:08:46:01:e8:ee:62:46:fc:2e:ed:85:af:fe:b7:
ea:df:e8:0d:18:46:ae:e1:33:68:9f:2d:0f:47:9a:20:11:10:
43:47:8d:6c:71:c5:64:d1:dc:0b:19:34:ed:d6:6a:d3:18:36:
b4:ee:16:8e:ef:07:18:65:6b:af:f9:aa:4f:f8:4b:b9:f1:11:
94:20:42:7b:b6:8b:6f:54:c7:3f:31:a5:fa:02:00:f8:4c:0e:
e2:67:38:60:e5:2f:89:56:b3:38:15:d2:c7:d4:92:c0:11:ff:
40:cd:f1:84:96:2e:80:e6:cd:97:98:cd:26:c6:ee:fe:d9:72:
ea:c6:2c:07:01:e1:ad:f1:ef:e0:ae:cd:23:d8:ea:14:ca:e3:
d7:ae:a1:d8:15:6e:19:7c:da:0c:66:67:d8:a8:78:5d:36:40:
ec:24:65:1f:4c:75:57:08:0d:93:d9:4c:b3:d2:c5:94:48:b5:
4f:f0:fd:03:95:de:0e:82:2d:c2:4f:74:38:e6:6c:54:f3:29:
fd:09:8b:3d:43:8b:03:a2:9b:c7:5c:1a:ff:8a:0d:dc:62:38:
c8:b6:e6:c2:a7:d1:52:f2:8d:61:17:5b:38:e9:3f:26:8a:bd:
ae:95:72:aa:aa:42:e2:a2:1f:b4:0d:8c:0e:e0:92:48:bd:c6:
4e:9f:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:25 2025 by rpki-client