Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: PxfI3iRBn7JqgQIGf924mBaXs+pX8une2zVu1OdAH18=
Subject key identifier: 3A:A5:38:9F:47:51:25:27:C7:1A:82:3B:1B:D5:18:FD:CF:1D:87:94
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 0198D4738EF0B160F7B693D9C02E2BD19A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: kwqBplCfJQlbkc6ie2lQs2tUO19NWpC6zL8jKZOfMro=)
2: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (hash: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=)
3: K8XuD1NpxrW0TJB7qtrYsXkJRDA.roa (hash: /CdBF5kIZ5ECcmHw5H6/OJaH4oIiEyJ+Vl+1/T4lKZc=)
4: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (hash: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8e:f0:b1:60:f7:b6:93:d9:c0:2e:2b:d1:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=3aa5389f47512527c71a823b1bd518fdcf1d8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:6e:0d:8b:e4:db:33:39:75:40:db:0b:e9:
b3:35:1d:b4:1a:d5:6c:ca:8e:e3:82:98:4a:4c:9f:
70:69:61:4d:98:61:8d:6b:a3:96:6c:f0:fc:f6:2f:
59:ce:9e:9b:8c:86:a4:2d:db:15:34:f8:44:9f:0c:
98:b1:b9:5c:72:56:63:ae:54:69:5d:66:d7:d7:fa:
3e:13:d2:ea:1c:d8:f9:d5:73:cb:c8:fb:59:87:47:
dc:63:a5:7b:e3:25:71:5a:30:50:17:03:ac:9d:af:
60:5d:9e:d0:39:04:9a:28:9c:56:7a:47:cb:99:71:
43:5b:1c:df:67:b2:a7:70:2f:76:c5:23:f0:7e:49:
09:be:a8:e7:f9:a6:22:31:a1:68:f5:c1:b2:af:e3:
83:47:ef:c4:db:9a:60:87:0b:1d:6a:bb:93:fd:e6:
87:e6:2d:a6:0b:b4:94:4e:e4:fe:30:13:62:78:0e:
ba:d7:eb:d0:79:e6:86:b7:e4:8d:cf:c5:df:bb:fd:
c9:80:8e:3a:89:47:03:fe:38:56:ce:f7:86:44:57:
32:03:4a:63:ce:8d:be:ab:1c:dc:bd:60:18:7b:c2:
c1:b7:9b:9c:af:e5:ce:cd:59:fd:b7:3d:b7:25:09:
8c:0b:78:96:55:b1:a0:90:70:2a:f6:bd:85:58:93:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:38:9F:47:51:25:27:C7:1A:82:3B:1B:D5:18:FD:CF:1D:87:94
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:7f:2e:36:2b:da:17:9f:e1:0b:c9:ec:f9:2f:5c:1f:b4:
2f:e5:ff:aa:d3:53:03:74:84:8c:38:a6:cd:97:e8:78:51:fb:
fc:17:71:94:29:94:0e:62:37:46:d0:55:68:db:68:0f:5c:ac:
03:b7:45:d4:ae:eb:a9:6f:6f:85:7e:11:b6:a6:34:39:90:cc:
8a:74:3e:d5:65:c0:a0:54:59:e7:de:82:13:ee:58:ed:a0:58:
e5:4e:8f:cf:d8:57:d3:cf:ea:0a:82:4b:93:a5:92:a3:8e:26:
10:78:50:90:f0:fb:10:9b:ce:f4:e8:f8:d6:69:5f:a1:2b:52:
c6:fb:e9:ea:63:9f:1d:6c:f3:b7:9d:63:9e:dd:04:9e:90:e2:
41:e5:8a:2e:d1:0a:a7:81:84:36:27:99:20:83:e5:42:ab:2a:
75:37:4a:8b:f4:6d:b9:4e:24:06:da:c1:44:c7:d6:e2:4d:b0:
77:bd:e5:27:80:8b:4f:b7:df:6e:9a:a0:08:19:05:a4:b9:e1:
aa:18:68:57:6a:43:28:20:c7:63:4c:97:03:f7:7a:70:95:68:
25:b6:f3:bf:ba:7a:13:75:51:fc:b3:39:79:8a:ff:61:cb:e1:
47:e6:27:fc:61:59:9c:84:82:5c:ae:7f:23:1d:88:c7:ea:98:
c7:83:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:51 2025 by rpki-client