Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: ugwzLj9Dhl+9WVj66vSSkLu0yX9JWQoCV3BkSvMukyU=
Subject key identifier: 44:C5:B8:61:4D:16:FD:75:85:F9:EB:52:B3:AA:11:4A:C8:D5:1A:09
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0198D47364472DE2B0EC0D0BD278118B84CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: FLDw3/IY49rkjMPQZHVpsC4lxpTVpjxjgbmddeIeEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:64:47:2d:e2:b0:ec:0d:0b:d2:78:11:8b:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=44c5b8614d16fd7585f9eb52b3aa114ac8d51a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:09:9e:af:80:80:e3:d1:c1:ee:5d:f1:23:
d5:e6:51:19:c3:4e:36:5e:52:2c:54:af:ff:80:4f:
78:71:27:8f:f4:e0:e6:ba:3d:e8:3c:a2:0c:10:c2:
da:00:c2:e1:e6:33:77:7e:7a:dc:40:37:3c:d6:f3:
8e:4f:72:b6:f1:ce:34:97:09:9d:46:55:8d:c9:db:
8d:bd:69:a4:ce:42:5c:e4:25:67:3b:ad:79:82:73:
45:21:33:9f:5a:a9:3f:b8:06:1b:02:f0:6a:d7:13:
fe:ee:7d:6d:3c:ac:de:7b:50:7a:43:d2:42:7c:76:
fa:41:91:ed:28:6d:90:42:86:5e:33:98:54:ec:f3:
49:5f:38:9e:cf:a2:8b:36:51:55:dd:f7:87:01:e1:
42:0b:a4:7e:d0:54:6f:43:ba:16:f1:ca:1d:78:c4:
4c:03:19:7b:8a:63:49:c6:6b:3b:f2:71:86:be:7d:
77:d6:b8:d9:35:16:af:70:53:76:39:78:8a:59:30:
88:27:16:ec:00:e1:34:71:fe:a0:8d:99:f5:a3:eb:
bb:7b:0d:23:ab:dd:92:51:4b:d4:a3:68:b2:4a:cd:
ea:b3:2d:98:32:19:22:3a:2b:06:9e:b1:f1:40:77:
7f:da:55:98:40:92:c0:1a:0d:d0:38:aa:67:74:94:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C5:B8:61:4D:16:FD:75:85:F9:EB:52:B3:AA:11:4A:C8:D5:1A:09
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:89:3a:37:2d:f9:22:4c:a0:97:0b:52:ef:84:f2:7b:6b:
7b:f1:17:42:4f:ae:b9:25:cd:99:7c:8f:9e:b5:92:fa:26:86:
17:92:10:e6:c9:9d:60:8a:fa:29:f5:be:af:bd:37:ba:79:ac:
84:b6:36:86:fe:6a:46:b1:94:86:79:fd:ab:88:c6:6e:3e:9a:
23:44:4c:79:dc:58:6a:36:61:da:35:83:26:40:13:84:4e:dc:
8c:86:90:99:57:0c:e6:aa:3a:9b:e3:15:1a:b4:9e:03:23:9d:
a8:c3:2b:2e:bb:12:5b:e0:4d:4d:08:83:13:de:33:3a:8b:ab:
03:5f:e9:fd:59:90:c2:1a:bd:04:7d:e1:c7:ed:8d:88:c0:84:
da:10:9e:52:05:38:fe:97:ac:7e:22:38:25:68:f1:b7:8c:16:
a6:a1:80:3b:df:01:73:c2:29:62:7f:19:ea:bd:2a:28:71:7f:
32:03:b7:b9:65:e3:19:db:bd:65:fc:b0:8c:72:b0:81:25:57:
b8:05:85:b8:5f:fe:e2:4c:8b:a9:ea:fd:56:a9:6d:dc:3e:43:
cd:fb:97:78:d6:43:bd:ea:2b:b2:96:a2:13:15:eb:80:38:d9:
68:fa:6d:73:e7:b2:f4:22:9e:98:1e:7f:93:36:2d:0b:2f:01:
62:20:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:34 2025 by rpki-client