Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: LdjYDI+vwvKtnJPDJ7RUoDPJW4AAZMvoHogsoB9sC8A=
Subject key identifier: 0D:48:BF:A5:2B:9F:F6:33:8B:46:49:25:AD:21:BC:09:5B:CC:93:29
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 0198D5F177FF4B72568E949871711E7911B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: 1uGJhCP0DujLvop/hAq6Mu0xJnChLcHBvVRLLb8yw7E=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:77:ff:4b:72:56:8e:94:98:71:71:1e:79:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=0d48bfa52b9ff6338b464925ad21bc095bcc9329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:71:90:c3:70:c1:c8:ae:2d:ca:39:08:c8:
a0:8c:f9:3a:3f:0e:95:16:a7:c3:e5:6c:a1:72:b5:
8a:16:bb:39:ca:e9:e1:5e:dc:84:54:b4:af:e2:6e:
de:6b:b4:e6:b1:4f:f4:be:84:10:19:c2:b0:0f:ce:
74:c1:e4:a9:d8:ff:db:d7:69:ef:b8:42:89:75:81:
cd:92:12:d7:65:c2:1d:0e:39:5b:cd:0e:ad:58:ad:
09:2b:d5:41:ae:ff:88:b5:26:1b:18:87:bc:cc:ca:
c5:da:87:14:18:d7:d9:32:bc:78:cf:39:39:77:9c:
ae:b6:d4:be:7e:78:a1:d9:c3:32:0a:7c:3f:b8:26:
a2:a3:e7:ca:fd:d1:3c:ff:b7:a5:36:e4:27:3b:77:
d0:a7:51:43:59:1d:2d:e1:bc:cb:b5:36:23:5b:1f:
f6:37:a4:54:66:09:74:58:f8:22:88:1c:73:20:04:
b4:13:86:c3:4e:41:4d:e6:02:a4:9c:4c:60:16:36:
d7:30:5d:38:b7:6b:47:6b:6a:27:1f:19:bd:89:70:
25:35:2d:2a:35:18:d7:f1:23:52:ff:6c:d8:be:bb:
d8:e1:37:dc:e4:bc:24:24:8e:f9:b4:46:59:70:de:
d3:46:90:bd:c7:83:a6:58:02:de:ab:d6:dc:09:40:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:48:BF:A5:2B:9F:F6:33:8B:46:49:25:AD:21:BC:09:5B:CC:93:29
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0e:89:7a:db:d1:4a:0c:0d:31:14:69:00:3e:50:b3:0e:cf:
ad:fb:ba:c7:76:bf:3d:62:81:a9:5c:83:4e:e3:93:57:d4:71:
07:00:ed:4a:51:0f:1e:69:d9:ca:89:20:cc:72:a2:e4:5c:26:
d4:78:ea:5c:28:0b:dc:35:ec:25:eb:15:2e:41:b1:9d:9c:82:
97:5e:d1:78:05:43:ad:0b:87:a3:29:60:b0:66:3f:20:67:02:
ba:c4:84:55:eb:1f:88:9a:88:99:32:d2:b9:5c:3a:61:1c:97:
e9:4f:f2:59:d9:5d:1c:22:49:77:bb:37:5d:7c:37:5c:9a:23:
ae:17:37:a4:8e:7e:36:7e:f7:77:65:06:3a:ce:66:58:1c:7d:
8d:82:e1:8a:e0:09:e9:de:07:6c:6e:7d:5a:66:20:2b:92:a3:
29:5f:f7:fb:a9:35:13:7b:85:7f:9f:7f:50:e5:91:eb:95:23:
54:cd:08:0f:28:48:ad:6c:64:ff:f3:b3:64:71:85:c7:4b:c1:
f1:77:8c:af:6e:69:2b:dc:b5:57:4d:5c:38:f2:76:b3:8e:ee:
b4:1e:7c:fe:db:09:9e:49:d4:da:6d:bf:fb:97:d9:a0:33:c8:
ff:94:59:b7:94:b6:74:87:92:eb:c8:99:85:b8:77:33:3e:a6:
60:cc:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:45 2025 by rpki-client