Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: 9jmZ0VhABnbdwRvp6TTaAv2zMMv2bBj/2uGot3Rnlmo=
Subject key identifier: 33:CF:67:F1:E1:92:92:44:EA:B4:4B:D5:3F:8A:3D:9D:08:4A:88:3B
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0198D697ED45670EEB498FDCE4CCD9596DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: c1DwNtPMuxfPoGjzU3NPswPGFynBMRY6+IhQ8WTga8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ed:45:67:0e:eb:49:8f:dc:e4:cc:d9:59:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=33cf67f1e1929244eab44bd53f8a3d9d084a883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:f7:76:bf:29:ca:6e:01:af:28:f1:76:53:
c7:e2:2d:6f:b5:29:72:cf:2b:4f:8e:5e:3a:a0:fc:
8a:28:89:ce:39:7d:00:04:3f:0f:bd:94:92:2a:1b:
60:df:ec:8e:1d:d4:5f:3a:81:28:6c:b2:43:8a:90:
22:04:be:4d:c8:b7:0e:a8:d7:6d:6c:db:bc:5d:34:
df:76:7b:26:75:33:d0:32:60:c5:11:1e:cb:e7:ca:
af:d6:cc:77:b6:f0:cf:c3:73:d4:65:4f:ee:9b:bf:
61:5c:85:ea:ce:77:14:08:7f:73:96:43:2a:49:2a:
b0:8b:1e:a2:7d:91:a0:bb:03:83:a9:b8:7e:2b:43:
5d:ad:e6:b3:42:b8:f9:29:8d:14:50:89:96:4d:7e:
56:30:cd:a0:3b:00:f0:44:83:1f:b1:43:22:71:c5:
95:9f:39:81:7b:e0:3f:31:c0:b5:85:a2:d8:41:05:
4d:4d:53:07:4e:d1:9d:9a:94:87:af:fd:20:21:0c:
ac:7f:4e:97:be:a4:fa:fa:03:d6:59:cb:e8:36:59:
e6:48:b9:31:08:89:fd:b8:0c:e5:24:f3:ec:15:e1:
1a:3a:c6:16:21:57:81:82:14:40:f4:be:09:55:50:
ff:14:21:ab:af:01:7e:29:43:b4:a0:ca:93:45:ee:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:67:F1:E1:92:92:44:EA:B4:4B:D5:3F:8A:3D:9D:08:4A:88:3B
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:66:4a:19:fa:00:80:38:3e:c5:2d:63:1c:05:bd:67:33:5f:
b6:79:e1:2d:2e:c3:ac:87:07:90:0a:10:4a:4a:4c:2f:b5:01:
2f:28:20:b0:c1:4b:fb:26:5f:6d:39:fb:1e:85:94:e8:9d:c4:
40:2e:f5:a5:a2:8d:ee:e3:7d:2a:ea:30:b1:75:b8:e2:cd:7c:
df:f2:50:2c:b6:c3:63:39:f2:b6:1a:43:e9:3b:dc:e6:f1:3a:
0b:ff:d6:19:41:57:7b:7e:52:0f:c3:7f:eb:4b:8f:9b:59:ef:
8b:e6:b3:64:2c:92:c3:cf:6a:6f:b5:c7:05:cc:3d:bb:92:c2:
64:32:5a:88:97:d7:79:18:0f:2c:32:54:bc:e9:09:cf:1d:dc:
04:c4:b1:81:15:e7:4b:81:06:cd:e6:b4:d8:64:a1:1d:9a:4f:
15:e2:c2:c4:80:5f:33:fd:cc:96:aa:ad:fa:4a:bd:da:e1:f3:
18:ba:e2:f2:a4:5b:4c:82:37:d1:06:ab:22:11:42:5a:b7:e3:
60:52:50:56:f2:0f:e6:a4:12:fa:99:d5:e7:a6:fa:55:0d:90:
7f:93:13:35:7b:5d:13:55:bd:b4:c4:d7:ae:01:c6:ff:ba:d4:
e4:ba:cd:01:1c:00:22:42:17:42:6e:fb:8c:a4:43:11:c8:41:
d8:f2:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:07 2025 by rpki-client