Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: v0EbNY+07My2KXoR+7gme/chBZ6IgHoWH5C14okPCVc=
Subject key identifier: F7:8F:BD:A7:CF:DD:BE:E7:77:C8:EA:0D:5E:C8:8D:0E:5B:B3:71:8C
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 0198D4E0C2F593760C580EC5280ADB453F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: 1gdX2fW7iB8LZj6q3zM/+9N7kzq1u1a/8PXeVwt3xxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c2:f5:93:76:0c:58:0e:c5:28:0a:db:45:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=f78fbda7cfddbee777c8ea0d5ec88d0e5bb3718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:f5:d4:ef:67:76:eb:5f:4c:46:25:8f:69:
27:1f:7d:c4:8b:8c:d3:46:1e:e3:d9:5b:89:ea:97:
6b:34:c5:87:25:42:46:4d:65:83:93:b7:90:1c:d6:
0d:d1:8e:27:e3:36:04:4f:bf:f4:74:ec:ec:8a:e0:
61:cc:87:78:76:a2:bc:e7:91:8e:81:fa:fb:1e:ef:
46:72:30:5a:a6:9e:fe:53:8e:40:cb:1f:f7:0a:9c:
e2:f0:5e:87:b0:a7:af:8e:72:24:1c:98:5f:14:7c:
51:f2:f0:55:f3:70:0c:6f:4d:44:1f:7f:20:f2:2a:
02:a6:42:b5:49:5f:01:55:f1:3e:b4:e8:78:ef:a0:
67:6b:29:08:cc:9f:ef:71:60:96:79:6d:02:29:55:
9b:77:38:ee:dd:fa:c0:6d:ee:18:d5:7e:ac:f5:37:
01:f5:81:2e:c0:cd:6e:c1:32:9a:4b:ba:ed:84:c9:
b2:4d:fb:d6:ee:86:1d:8e:a0:c7:9f:fc:7c:d9:b9:
84:d9:cb:10:6d:ee:61:74:5b:cf:21:e4:36:a1:fb:
97:a7:03:0f:c3:68:55:37:cb:d0:f8:36:2b:c6:03:
17:77:d0:03:14:d2:98:36:75:0c:b5:f9:3f:b1:b9:
24:38:71:13:24:52:b0:4a:ae:ee:61:5c:65:c5:45:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:BD:A7:CF:DD:BE:E7:77:C8:EA:0D:5E:C8:8D:0E:5B:B3:71:8C
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:ef:fa:17:27:12:d4:04:52:e6:46:ba:f6:52:c6:8d:e7:
62:10:48:d8:a2:4a:11:99:4f:5c:ff:55:a1:41:59:2c:9b:c2:
22:90:89:5f:21:e5:23:a0:36:62:4b:b0:9e:ec:0b:89:fd:9a:
8a:10:56:0d:5f:2c:db:b4:88:cd:a3:37:24:94:97:00:c8:1c:
12:3e:33:b8:5e:74:20:87:86:4c:a9:17:b1:2a:2f:16:ae:d2:
c0:07:78:09:2c:f9:81:1a:6c:f6:84:54:ca:2c:08:70:1f:44:
b6:16:17:93:f5:86:7e:7d:d6:73:14:77:42:4c:df:a7:a4:aa:
7b:92:1c:94:70:0f:3c:e2:89:b3:0d:b4:d3:fa:72:77:12:3a:
cd:53:33:6e:46:20:ce:df:1f:9c:00:75:83:96:07:d9:8f:9b:
9c:ca:84:fb:1f:69:b3:5e:83:e5:b7:74:9f:b9:e6:ae:a5:80:
0b:1d:89:e5:74:8e:19:f4:ba:5e:0a:a4:58:df:a6:e9:83:ef:
3d:3e:87:45:7a:b1:81:5d:ae:d1:07:6b:63:79:7a:cf:25:9b:
0d:c4:6d:03:35:24:6d:e4:87:0f:3c:02:eb:d3:f7:5c:60:e4:
2a:f2:21:0f:5f:af:2b:76:ec:a8:d2:26:f5:97:2f:59:70:3d:
bb:2a:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:35 2025 by rpki-client