Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: DFevAnoBGGUkUvRltWObFcYsczU/+AOmXw1VtPCj2lI=
Subject key identifier: 49:51:0A:8E:A3:04:81:70:F1:B2:B4:25:EA:8D:EB:71:7A:05:4E:97
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 0198D6CD28BD3B657158F4BB3E4E5F345E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:26 +0000
Manifest this update: Sat 23 Aug 2025 12:00:26 +0000
Manifest next update: Sun 24 Aug 2025 12:00:26 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: gx6JBFfwP8sBTg/TUFUv4kzRT/DUhoxuHuR8zBqpyR4=)
2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:28:bd:3b:65:71:58:f4:bb:3e:4e:5f:34:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Aug 23 12:00:26 2025 GMT
Not After : Aug 24 12:00:26 2025 GMT
Subject: CN=49510a8ea3048170f1b2b425ea8deb717a054e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:75:35:2c:7a:54:f6:1d:61:d3:88:9c:fa:
ef:77:1c:1d:2a:00:b4:73:54:8f:e6:7d:ae:c3:9e:
95:6c:0e:7b:b8:ac:52:59:35:4e:71:d1:c9:de:e4:
eb:b2:a4:45:be:0c:6b:49:8b:ca:59:93:f3:6b:be:
d3:05:7d:22:e7:fa:db:41:54:d1:8d:1c:56:fa:b3:
c8:bc:53:24:8a:0e:42:08:c3:48:6f:bd:48:a2:af:
f4:9a:32:cd:48:af:99:53:87:d8:d6:f2:cf:21:82:
ba:97:9a:c6:db:59:1a:29:9d:da:75:a1:25:ae:de:
ed:d2:8b:d5:ee:de:49:28:b7:79:dc:4a:7c:f9:0f:
d1:5a:2f:a5:be:84:85:dc:cc:91:fe:28:51:17:ac:
1e:cc:b8:27:ac:52:f0:07:ee:ee:6d:fa:a9:14:18:
2a:5b:d1:c6:dc:d0:93:c7:b5:ce:44:03:fa:42:88:
15:28:4e:6f:38:0c:e5:ce:6f:0e:03:48:b0:54:61:
4d:b2:8c:ad:2d:51:f3:e4:69:81:97:8c:af:b7:b9:
24:1e:80:29:41:2a:6a:90:a0:b7:23:d3:58:fc:8e:
36:f9:b2:0f:ab:b0:86:09:e6:00:9e:fa:2e:9b:3d:
9d:2b:c1:e3:4d:1c:6b:3e:f9:a5:51:9f:1f:d2:8d:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:0A:8E:A3:04:81:70:F1:B2:B4:25:EA:8D:EB:71:7A:05:4E:97
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:c8:79:2c:21:36:ea:58:ad:13:af:2d:7a:0a:a5:6f:11:
78:b8:80:60:37:e9:c3:ba:b9:d5:43:3f:a4:d4:30:8a:90:2e:
70:31:36:1d:21:c7:cd:c7:94:be:b2:ba:94:0c:7e:40:08:6e:
d4:e0:46:0d:63:0d:9c:8c:d8:d7:ec:95:56:9b:03:da:65:60:
63:14:a4:36:22:9c:88:e4:55:e6:e9:a5:c6:a0:9f:4d:e9:89:
2e:6e:aa:b4:a8:d8:06:36:76:9a:7a:d6:cc:38:6c:9c:d7:b1:
ba:b9:d9:c2:e1:28:bb:1f:55:83:64:8d:58:58:c4:26:4f:9f:
97:8c:ed:22:63:97:22:d1:ea:12:2e:d5:63:1f:5a:16:ba:46:
c7:ad:97:6f:f2:97:b4:ac:76:6a:84:75:99:92:aa:63:77:89:
91:0a:13:f9:03:19:75:ee:f7:5a:ed:cd:65:90:5f:3c:9b:8a:
72:92:f4:ad:3d:d9:29:08:8f:0a:25:38:78:27:eb:63:27:2b:
02:5d:73:c2:bb:6d:9c:ba:48:cd:1a:f7:04:52:5b:a4:ed:a8:
e4:e3:88:a5:65:b1:90:26:6d:db:d4:58:b0:9a:4d:45:46:60:
5d:93:25:ed:53:1a:1f:49:d1:5c:9c:b9:6c:91:49:1c:10:0a:
e4:16:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:59 2025 by rpki-client