Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: inLFCqSHFqqVqLVrE8832fPgPDv0I/9oafiwdJ5D4NU=
Subject key identifier: 32:C2:02:A6:57:39:9E:9B:F4:04:2E:7F:DA:35:92:74:70:3D:40:97
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0198D4A7A56D8DF7188C75AA25B804178E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 3UTErLPoU/hs+fWTiNCi4PhHnfJ8kv3S+IuGWxrTLSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a5:6d:8d:f7:18:8c:75:aa:25:b8:04:17:8e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=32c202a657399e9bf4042e7fda359274703d4097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:a1:bb:ad:81:0d:2b:6a:86:4e:7c:ca:e5:
1d:79:a5:f7:f4:50:5b:0b:cb:8a:57:55:6a:0b:cf:
30:d6:a6:8a:b4:e7:e8:c8:85:b7:31:75:de:ff:c5:
65:16:d7:40:68:72:71:f4:82:33:56:68:f6:25:9f:
74:d3:12:9a:c5:b1:df:a5:a9:32:dc:01:20:e0:f1:
38:3e:dc:c4:9a:54:7d:02:2e:cd:bf:3a:7f:5a:3b:
34:39:01:83:4b:57:fc:7c:1a:3b:10:28:13:f3:cc:
28:d6:ce:ed:6e:8a:1b:22:3c:59:3c:02:b4:4a:34:
5a:b5:a4:66:c5:67:ed:7b:9a:8a:26:38:af:a7:0a:
9b:31:50:40:d5:de:db:17:f6:d3:75:20:f7:c0:5b:
38:e2:9e:a8:17:c1:24:eb:44:38:bf:36:f6:cf:ce:
d0:37:4e:22:a8:69:ed:25:b8:bd:56:18:dd:f4:e0:
9c:ee:ec:45:06:c8:9e:90:9d:55:32:41:8f:a5:98:
fd:8a:5c:28:c0:2e:be:1d:74:b5:95:59:63:8c:c2:
33:21:c6:1b:d3:f6:8b:d5:9a:28:da:73:75:f4:24:
9b:2f:59:36:e4:1c:65:7f:b6:cf:95:51:01:1d:f5:
7c:20:4b:ea:7f:b7:bc:fc:26:72:1d:07:96:e7:71:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:02:A6:57:39:9E:9B:F4:04:2E:7F:DA:35:92:74:70:3D:40:97
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6c:b5:f1:7c:4a:8a:4e:9f:31:7b:08:32:43:e9:a5:f8:80:
80:60:c6:fb:e7:2f:b8:a8:45:d8:e6:6f:4b:24:31:8c:52:f5:
8f:04:8e:97:e4:b2:07:7c:34:6e:36:f4:72:b6:3d:07:82:a4:
5d:d4:fd:a1:ca:21:d9:47:ab:4e:0b:16:db:b3:01:b6:f7:d6:
21:f1:54:cf:d0:fc:9c:d2:0d:45:8b:e5:e7:82:bc:f3:94:0b:
ad:fa:9f:91:21:ed:f1:67:9c:10:22:3b:28:21:49:0b:0d:9c:
06:dd:30:48:51:34:38:60:13:f0:98:b3:27:4e:f1:c0:46:17:
b2:c3:e4:4a:b0:44:b1:ce:1c:99:be:c5:d1:37:ea:b1:e1:52:
41:f4:2c:b6:2b:2c:d2:a7:71:75:35:d4:57:c1:48:9c:cc:28:
94:a7:1d:8d:a3:64:2d:61:5d:9d:8c:e7:a4:83:1d:ab:74:78:
19:f4:70:d7:3d:15:cf:75:de:9b:d7:51:18:5e:8a:98:2f:bc:
5d:ca:1c:96:4e:cd:a3:3a:39:24:0f:50:2c:80:21:b5:63:44:
a9:44:b5:e3:5c:b5:2f:e3:93:4a:e1:71:b0:09:a1:b5:33:26:
c0:8c:45:d9:9e:bc:2a:f6:fd:1b:3e:e6:1e:1d:86:f7:9f:11:
72:49:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:48 2025 by rpki-client