Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: hfyUm1gjonTPsfIgxRQl3aGJVPo2aSj4Vm1SyZkm6AE=
Subject key identifier: 66:43:B9:BA:AB:1E:4F:F7:3D:01:C9:B2:50:FC:5D:8B:6B:1E:64:49
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0198D516301CD637642389BB72AE51EDD64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: jPhDsrI+VcZ31vtDJbgmdj6QFsc6Yro0ANqVTp6Yc2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:30:1c:d6:37:64:23:89:bb:72:ae:51:ed:d6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=6643b9baab1e4ff73d01c9b250fc5d8b6b1e6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:a0:f5:84:2c:0f:c6:63:e5:74:60:f7:15:
6a:9f:71:93:0d:e0:66:38:ec:e4:91:33:3d:59:57:
b7:52:ab:4e:65:ac:56:d0:1b:e3:91:01:c7:98:43:
78:45:5f:b9:57:cc:c6:46:5b:fe:7a:8b:76:cf:d9:
42:ed:1f:bf:cf:7a:5b:1f:0f:df:aa:0b:e9:15:b6:
a8:96:22:55:7c:fa:d0:59:6b:e2:e1:d9:90:c2:b9:
6f:c0:3d:6f:91:8c:e9:d1:c1:6d:58:9b:4f:68:3b:
17:ba:19:99:2e:6d:c4:61:69:bc:d7:8f:a3:0c:dc:
e0:19:69:5a:86:7d:c7:bc:a4:81:c1:9d:bf:e0:3e:
01:51:fc:f6:51:d2:51:74:43:92:48:d2:70:05:13:
93:8c:82:26:84:bb:70:f4:38:27:96:68:ee:d8:66:
01:03:3f:48:9f:29:a4:89:14:3c:b4:4d:bc:5e:37:
b2:b2:3c:d2:30:7f:84:cd:b9:25:5a:da:04:36:ed:
9a:09:23:63:0b:ba:37:98:41:46:8d:93:8f:6e:4f:
24:e4:2d:1c:bc:65:69:93:05:b9:a1:47:4c:ed:5c:
d0:a6:a9:60:37:f0:49:0e:46:d6:1c:20:df:c6:77:
30:45:13:6b:08:02:20:7e:bf:da:be:41:97:35:db:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:B9:BA:AB:1E:4F:F7:3D:01:C9:B2:50:FC:5D:8B:6B:1E:64:49
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:03:d9:1c:42:ba:5b:3f:47:59:a0:55:3d:0c:9d:44:9e:b5:
d7:f3:f6:b8:dc:ff:79:26:ab:54:b4:21:1e:a1:f0:cd:a9:91:
c1:df:84:43:18:94:81:66:2f:0c:fa:54:59:24:1f:d4:4b:ec:
e4:65:c4:15:4c:50:35:15:d3:44:53:be:9c:4a:ac:a1:cf:b4:
73:3e:3c:b8:84:12:60:54:2b:51:d2:2e:ae:59:73:16:c8:e1:
08:6d:dd:ca:40:08:4f:05:5b:10:cf:95:d2:bd:39:db:fe:91:
6f:e3:a7:15:c3:9e:93:fc:8c:86:4d:a9:4a:13:bb:2f:9d:ca:
19:24:98:e9:49:2e:80:ef:f8:bd:91:45:d7:03:c6:8e:44:02:
6f:a2:18:a2:0a:d1:2e:bc:f4:64:88:2a:3f:52:cc:bd:5d:c5:
1a:3e:36:d6:f2:aa:57:fb:12:e4:a7:a6:3c:94:05:f5:e4:e3:
99:67:38:f5:c6:a9:60:8b:1c:ab:da:00:cd:54:2a:1a:53:9b:
aa:85:6e:13:6c:8e:d6:b3:67:8a:39:fd:25:dc:51:3f:da:e2:
ea:74:69:19:cc:32:ce:72:06:03:6c:27:9d:a3:1d:2e:a0:72:
e8:e7:1a:cd:7d:6e:ab:f9:13:15:86:5e:00:da:fc:20:03:7e:
f4:58:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:48 2025 by rpki-client