Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
File: sz3NILWulcFy0y7XKevzBhl7I-c.mft (raw, json)
Hash identifier: 6UnC3wrDOn6r2CrL5s0V9eCxl/KipZc9jA6lX20DnRw=
Subject key identifier: BB:99:7B:EE:1F:CA:96:6A:1D:2A:C0:71:67:16:8A:C4:DA:F5:52:22
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Certificate issuer: /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial: 0198D705CB6DB7F502FB7881A669928948E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:17 +0000
Manifest this update: Sat 23 Aug 2025 13:02:17 +0000
Manifest next update: Sun 24 Aug 2025 13:02:17 +0000
Files and hashes: 1: CIm7PdRT4tGc0ohUd0vMkXyk2Z4.roa (hash: bKi9ERQ3HDvQWS3A9n+SnlJFymCAx7E6eQcIAFgcP7o=)
2: sz3NILWulcFy0y7XKevzBhl7I-c.crl (hash: 6hj1sjx28KfO6aRhLVwz5bqK+SX0M2no8QEIUeOHeDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cb:6d:b7:f5:02:fb:78:81:a6:69:92:89:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Validity
Not Before: Aug 23 13:02:17 2025 GMT
Not After : Aug 24 13:02:17 2025 GMT
Subject: CN=bb997bee1fca966a1d2ac07167168ac4daf55222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:9e:50:08:30:81:02:22:74:54:cb:55:92:
76:db:c0:70:47:c1:c4:2a:2a:3b:21:5f:1c:73:0b:
51:55:68:9a:40:4f:f0:1e:9a:a3:ba:ab:e1:7a:ec:
a0:26:92:e1:97:26:b3:00:cd:fa:1f:fe:c6:29:fa:
9c:1a:36:ed:7b:dd:ef:f4:4a:f0:ca:7a:5f:62:52:
1c:61:18:37:46:89:79:2b:ad:38:8d:00:ac:97:2d:
01:6e:80:b8:ba:66:b4:85:27:81:0b:1d:30:8e:e4:
2d:d9:f2:7b:50:17:12:92:cf:80:17:a3:93:14:32:
41:07:a1:1b:b1:20:9c:c7:d5:c4:44:c9:a9:de:68:
5b:83:ad:5b:d6:96:10:a9:05:9a:ca:ee:b5:b5:ea:
24:ea:66:3f:63:29:83:94:12:a4:87:62:97:f1:13:
3c:b1:54:07:9e:09:1b:fc:75:f3:2e:c0:0d:2d:73:
4a:8e:4d:8c:f3:48:6e:e7:3d:50:1f:59:af:2f:9b:
30:d1:06:2c:a7:ab:a6:7f:d7:47:8c:6b:32:de:89:
b7:b9:2a:82:c7:d9:26:c3:0c:db:02:60:af:5a:22:
be:8e:41:cc:33:f2:05:cc:bc:b3:9e:35:af:da:9d:
dd:cf:3e:1c:e6:4e:8f:45:f3:1f:99:80:62:dc:55:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:7B:EE:1F:CA:96:6A:1D:2A:C0:71:67:16:8A:C4:DA:F5:52:22
X509v3 Authority Key Identifier:
keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6f:9f:a5:7c:ae:4b:5d:74:12:a4:7a:9b:0d:b6:fe:db:32:
2f:b9:22:e6:74:0c:f9:54:09:5b:b6:86:af:46:33:57:03:4d:
98:cb:5e:1c:e2:28:d8:7f:0b:3d:9a:eb:22:ef:99:c9:0b:b9:
2b:0a:67:32:26:7e:bc:e7:74:2f:ea:79:b3:d6:e5:c2:e6:ef:
e3:5c:80:fd:bf:70:32:5a:7e:28:e2:3e:16:3e:ac:70:79:45:
59:98:09:7c:99:67:d7:bd:3d:3b:8f:61:e1:16:47:e0:8c:95:
be:e9:e5:bb:3a:2f:d3:39:1f:63:9a:42:24:92:b7:42:fb:dc:
fa:ff:31:91:03:dc:84:06:3c:47:b7:1e:65:1a:9b:3c:16:1b:
63:63:98:c2:b8:f9:72:a9:07:b2:e6:49:86:af:b1:91:30:21:
3a:17:de:6b:71:8b:38:35:9d:60:bd:ad:4c:3f:a7:0e:5a:c0:
6d:eb:57:59:5c:13:c2:50:45:63:77:ae:31:a5:1c:54:b2:fd:
68:44:6e:94:45:0c:ab:a9:7c:d7:ec:58:71:ba:6f:b2:b1:bb:
13:8a:49:19:7f:8e:86:98:b3:9f:1e:aa:9f:f3:9d:bb:7e:06:
30:e8:44:ca:9c:f9:49:a5:8b:0f:14:46:61:88:1c:25:68:15:
da:37:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:49 2025 by rpki-client