Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: 33wrH4r6FMlr5Mo9W2GroU+rKlLGEPWFTqai4ulQpTo=
Subject key identifier: 2C:FD:4F:47:FE:4E:00:AC:58:AE:5C:E2:6F:D7:63:68:DC:73:43:65
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0198D54EA0678E37EF6E74709D139D08CC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: 4ocRUiuLoBN1JBtbBDnsmIA2QgJJcrGYf7G1VK3UK/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a0:67:8e:37:ef:6e:74:70:9d:13:9d:08:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=2cfd4f47fe4e00ac58ae5ce26fd76368dc734365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:0c:15:4f:bc:c1:c9:6b:8d:85:96:c9:56:
a1:b4:ce:fc:16:fd:42:e0:df:b7:1a:11:a6:47:31:
08:8f:fb:ad:62:c1:49:6d:5e:3e:61:94:60:10:16:
51:e4:d6:24:28:5f:f8:bf:bc:6e:b7:a2:8b:91:7f:
18:c2:3c:24:ad:f2:ec:88:9c:97:b8:3a:09:e9:79:
d4:d7:91:14:05:04:b3:ca:74:66:3b:18:b4:c1:b0:
2b:77:53:44:9d:cf:83:23:a0:33:3c:34:46:f1:bc:
1b:c3:a6:66:2e:c2:03:e9:48:82:7c:55:78:42:8c:
f3:8b:19:7c:e8:1c:1e:86:ff:16:b7:25:9f:bd:41:
c3:83:ec:0b:74:b7:f2:24:c0:a4:cc:68:82:87:12:
9a:b1:5c:04:30:c9:98:dc:e1:06:7a:ba:f8:27:d5:
e2:2d:42:c0:dd:9b:75:b4:34:6a:7e:49:ea:8c:a4:
ce:69:94:60:f6:43:b6:77:c3:77:ab:ec:92:af:87:
b8:76:0f:62:13:5f:ac:8d:32:b4:d5:14:c1:06:66:
10:e6:ff:d7:d8:97:1b:b2:da:10:bb:a2:f8:1f:cc:
08:29:b0:99:48:84:e3:51:50:d4:4a:5d:64:35:a4:
b4:ba:07:50:e0:b6:f6:9a:f7:17:f1:1d:8c:ef:98:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FD:4F:47:FE:4E:00:AC:58:AE:5C:E2:6F:D7:63:68:DC:73:43:65
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:9c:36:f8:0f:3f:b2:76:9c:24:af:46:21:04:89:7a:11:
66:54:01:9e:fb:ce:e2:bc:6f:89:d4:df:8b:56:4d:4d:ba:77:
6a:6c:30:17:bb:53:e8:10:f1:58:94:0e:51:e4:c5:13:00:15:
4f:9c:c0:d2:da:66:8f:df:c9:e4:c9:50:bf:c4:21:1b:bd:58:
6e:9e:b1:50:5c:2b:33:23:47:ba:84:c6:e4:26:53:dd:f7:dc:
2f:e0:95:48:5a:af:da:5d:1a:de:d3:45:b9:43:ca:fb:50:1d:
3b:9d:b8:84:b9:ea:22:f4:bb:db:ec:b8:f1:16:1c:a7:18:17:
00:b1:72:38:ae:cb:84:74:c5:4f:95:00:37:9c:eb:96:65:4f:
62:30:55:01:03:f3:01:c1:27:49:31:02:52:1a:6a:df:1d:45:
9c:fb:ff:f3:38:d4:72:2d:f6:ef:41:b5:26:2b:d9:c1:01:9a:
8f:95:3b:3d:0b:5b:28:ca:4e:f1:64:00:9e:7b:75:be:82:8f:
d3:1f:b5:a1:e8:cc:d5:1f:d2:11:4c:f6:fd:ce:c2:e1:3b:f9:
01:7d:ea:90:d7:06:2f:e8:e4:68:6a:fa:5f:be:b1:37:05:12:
7f:89:29:e7:c7:1c:3f:65:71:f7:36:15:31:c2:dc:b9:c4:1e:
32:9f:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:10 2025 by rpki-client