Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: olAuHFlR4ULiB60a9U/BP5EU38ouVAdf+SGo2Jqd0qM=
Subject key identifier: 8F:7F:F8:77:DD:71:90:07:FA:65:A1:CC:DA:D5:23:25:84:C8:D4:1A
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 0198D4E056A5E7AEC82601E7B771EF845319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: rLs773iaAwyflRNRzw1lbGg421XThmP6Os0R/9PIMcQ=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:56:a5:e7:ae:c8:26:01:e7:b7:71:ef:84:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=8f7ff877dd719007fa65a1ccdad5232584c8d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:71:33:4c:47:03:74:a8:70:67:02:6f:d8:
1f:6f:a5:fe:6a:bb:18:72:b3:55:41:ec:07:19:ba:
6a:75:15:17:72:3d:05:e6:f0:57:ec:c5:87:20:05:
a1:61:0e:67:b5:52:c1:7c:83:51:22:99:89:0f:35:
fe:26:7d:18:84:14:b2:87:11:b5:9e:6d:df:65:29:
34:eb:cd:01:da:a9:48:eb:b8:2b:dd:fb:90:a9:b5:
f3:8b:eb:41:8a:0c:ce:dc:9e:10:1f:97:ff:e2:fb:
b0:c5:a1:c9:ab:4d:04:af:20:cc:0f:6e:db:de:b8:
71:20:a3:da:ba:c1:34:16:4f:1c:8d:c9:0a:e4:dd:
d4:06:5b:6b:9e:fd:3f:b2:6e:59:df:22:b3:a5:0d:
83:06:fe:f1:9c:20:68:8c:29:a9:d4:6e:56:fc:6f:
aa:f6:44:bb:c9:86:b5:38:16:7c:7a:17:6e:33:b5:
ea:f9:8b:c7:ff:a3:5c:d1:17:7a:ea:1c:43:8f:61:
c4:35:0b:88:22:e2:64:61:a9:8a:aa:39:50:8c:93:
54:49:4e:bf:dd:2b:e5:d9:8a:ec:da:6c:f1:a3:ad:
90:aa:50:e3:35:90:ca:fc:36:94:98:8a:5f:88:07:
35:72:2a:ec:37:3b:1d:62:80:a6:c3:3c:86:ec:16:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:F8:77:DD:71:90:07:FA:65:A1:CC:DA:D5:23:25:84:C8:D4:1A
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0c:ed:40:39:3d:a0:b2:45:b6:08:96:2b:35:21:47:d3:a5:
f2:ee:58:35:69:82:e7:92:3a:3b:da:54:c3:ae:ea:7e:25:13:
19:63:3a:3d:f8:87:27:bf:bc:1f:15:69:21:b1:fe:86:1d:01:
42:a1:90:d0:8b:74:41:9c:f3:82:6e:d2:26:e2:ab:66:3b:c6:
c6:48:19:3b:29:ac:15:50:54:8c:9e:22:f6:c6:d6:de:55:6d:
5e:7b:a0:3c:0c:ef:db:2a:9a:16:16:0f:1c:04:3e:74:5a:21:
e3:e4:7d:30:8d:22:86:e6:97:75:28:01:a8:c6:f5:7c:61:4c:
1e:38:13:f0:db:51:db:67:0c:de:0c:83:e0:20:76:a5:74:79:
37:6e:d9:59:e6:a2:58:d6:e4:2f:26:7f:fe:b7:df:fd:71:57:
aa:5c:fa:59:6f:17:80:e2:98:b2:49:b1:09:7e:62:8a:8e:74:
a0:bc:2c:a3:6a:5a:e4:4d:6b:53:05:18:dd:2e:d2:5f:ce:94:
16:48:22:00:f0:8f:75:d5:51:1f:9c:1e:7c:c8:dc:41:34:a3:
36:82:f5:22:29:02:09:2a:ca:7e:f2:f7:dc:ed:1b:8a:13:01:
2a:72:10:bf:7a:64:f5:d1:ab:ee:a6:a4:70:2d:20:3d:70:80:
2c:7e:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:05 2025 by rpki-client