Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: IOfOSvmRAY/av9p9Iz6s6gHzOkiqqSX5wycQ2Gh781A=
Subject key identifier: 01:CD:79:DF:3F:AF:11:5B:97:24:4C:99:7B:CC:34:AB:68:66:88:24
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 0198D4DFE8FF1A3C72B19CA864DF881A801E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: ebZRyOw91QViRImEat76PBm+kxnOjH9HLZa902yfAcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e8:ff:1a:3c:72:b1:9c:a8:64:df:88:1a:80:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=01cd79df3faf115b97244c997bcc34ab68668824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:38:93:a5:43:6d:89:d2:72:6b:60:94:d3:
16:03:72:1b:6d:21:52:dd:dc:8c:b3:c2:15:bf:c7:
2e:49:1b:fb:2b:93:bc:29:e4:66:16:02:73:c9:6e:
5d:17:46:04:62:38:c5:bd:fd:fc:5d:0c:ae:e1:04:
d9:4c:2f:98:62:4c:fc:97:5e:2a:14:8c:c3:48:d0:
0c:4a:a9:77:db:f1:f9:06:f8:02:8b:38:b9:31:8f:
f1:54:cd:84:49:e2:44:e5:58:d7:8f:e3:14:ee:c4:
b6:eb:53:62:53:00:bb:38:c0:27:e7:ba:0c:84:5e:
a6:07:b7:74:01:d6:72:3e:38:e0:f3:3f:c6:1a:19:
53:34:a9:d1:bd:99:e8:55:82:15:24:b8:37:34:1b:
d4:97:47:8f:23:72:c7:b0:83:e3:fb:31:b1:77:b7:
38:73:2c:fd:d4:2e:fd:e6:e2:54:c6:f8:0b:e3:51:
8f:51:9a:e8:ca:b8:7e:c4:8e:fd:bf:41:14:c0:17:
9f:12:8e:b2:c6:de:2a:e8:44:72:c3:ff:3e:f3:cc:
d0:55:4d:e4:33:34:95:68:ba:bd:c0:bd:c1:94:ae:
67:7c:42:a1:5b:82:0b:8f:7e:26:68:5a:9a:aa:b6:
af:c6:dd:58:81:b7:cc:c1:01:6d:df:82:72:a3:86:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:79:DF:3F:AF:11:5B:97:24:4C:99:7B:CC:34:AB:68:66:88:24
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b8:19:23:e1:50:e1:23:d3:eb:29:a0:2c:95:88:d5:2b:dc:
3a:1c:40:54:99:0d:9d:8d:b5:b9:59:84:37:0e:2c:cf:06:54:
2d:3f:52:f0:e9:ba:7f:4d:6c:50:21:88:5a:59:17:10:3d:d0:
cb:c6:c2:01:e7:d2:6e:30:d7:39:25:e4:af:9f:b9:86:7d:46:
76:01:be:88:ba:bf:12:e8:57:6e:d0:ec:7b:88:f9:ee:ca:08:
4d:34:5f:b0:08:6e:15:30:67:28:2d:a0:91:77:49:f5:64:48:
9a:ec:d5:6e:bc:2e:06:4b:17:2c:25:e1:f3:01:0b:3c:ea:8c:
c1:53:8a:44:a0:9b:56:9c:0f:be:09:51:66:10:b4:6e:c7:9d:
d1:c7:78:41:b4:51:76:d5:9b:23:65:c7:8a:39:14:14:2a:94:
6f:d8:c6:aa:ce:5a:d6:9a:e4:f1:b8:ad:d7:ca:c9:9d:f1:6f:
fb:f5:ad:f9:ce:af:eb:e2:f9:73:ab:44:76:34:67:ff:b7:0a:
25:7b:dd:fe:14:8a:f8:c0:6e:55:c1:1d:c5:dd:e7:0e:6a:2e:
0e:bb:73:e5:42:1b:43:5e:50:a4:6f:4c:f6:64:62:d8:42:31:
f4:ab:3e:28:6a:ba:b9:7b:4d:a3:c8:9d:57:6e:31:a6:17:39:
f6:86:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:18 2025 by rpki-client