Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: aDtw79bAVNwA8zIuu0GZ6yCcF/K4RFDRfovT+t8Pr08=
Subject key identifier: 2D:14:77:27:7E:EB:20:1B:84:16:F3:98:78:BE:54:4C:57:3A:EC:2F
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 0198D5F11F0F5366D4A6AD3230AB8B1BAFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: kP1cJh0mJuAOg6ghimiWt2TZCYqo0pBAfn2UTb1KrsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1f:0f:53:66:d4:a6:ad:32:30:ab:8b:1b:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=2d1477277eeb201b8416f39878be544c573aec2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:30:91:7d:21:12:94:5d:db:2c:29:32:4e:
47:62:a3:cd:0c:d4:6b:d5:26:37:07:76:8a:d6:b5:
bc:75:6a:1a:65:f0:f0:f2:b2:f7:c5:d9:a8:aa:e4:
2b:b5:48:ad:27:81:bb:3b:61:76:f0:97:09:14:37:
37:0a:a7:1b:d8:50:c2:d1:3d:f9:ef:a3:55:b8:a8:
17:d5:7c:7f:cd:98:19:ff:a9:fa:d0:7d:fb:42:85:
24:0c:99:da:4c:c4:5d:73:6f:42:89:c2:66:51:59:
95:e8:8d:f6:30:27:66:cc:69:4a:5b:44:79:8c:85:
7a:22:91:18:62:57:25:de:85:d4:11:37:c9:e8:21:
ab:05:01:e0:72:7b:cc:0e:d8:31:b9:bf:85:51:5c:
61:44:91:eb:0a:08:43:ef:7e:0c:f4:b4:7a:04:ff:
06:cb:b5:2b:6c:f9:d1:09:68:b3:c8:20:47:ed:03:
59:a8:50:00:13:86:1d:a2:94:19:5b:56:52:ea:c7:
53:ad:2e:21:3b:1b:5b:8f:96:88:6d:dd:4f:f0:e3:
0a:d6:21:2d:c2:29:84:a4:9e:55:7e:b5:be:fe:be:
e8:e1:a5:f7:81:3d:d6:a2:da:f6:8f:49:91:a8:ec:
98:24:74:ab:6d:89:3f:b9:20:b4:18:ab:ac:f1:0e:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:77:27:7E:EB:20:1B:84:16:F3:98:78:BE:54:4C:57:3A:EC:2F
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:85:ef:e3:cb:ac:ab:fb:88:3e:d9:02:98:ab:e6:5f:7c:c6:
e7:f0:70:03:e0:d7:f3:75:e2:d3:8e:07:8e:06:c0:7c:9b:d6:
49:de:8a:9d:ad:87:cf:75:36:58:e9:26:46:c7:69:79:a2:66:
00:f6:d2:1e:cd:cc:f9:0e:a8:3f:22:c0:75:c3:e7:94:32:8e:
64:56:4e:63:c2:66:b0:11:eb:1f:76:11:e2:0d:8a:52:7d:03:
8f:91:44:84:61:77:3f:d9:95:7e:50:83:cc:14:de:af:0b:95:
d2:41:34:7e:9e:c7:e0:42:23:be:7a:ce:95:5b:e1:06:c5:35:
ad:d2:44:64:e0:48:55:8b:5f:34:9e:99:3b:6e:28:73:f2:ba:
fa:2f:06:6c:f7:40:b3:da:be:14:5b:4c:b2:5c:37:bd:84:10:
54:06:b3:cd:a9:5d:26:f9:69:d4:9f:69:33:7a:38:1e:2c:db:
fb:5b:5f:cd:1d:99:08:8e:42:3f:5e:6d:34:23:9b:de:d6:f3:
21:5b:76:44:18:07:01:a1:3b:e8:2f:0e:4c:72:f8:2f:9f:14:
f1:bb:c0:94:1c:aa:fa:c6:3d:0b:7d:75:8d:6d:a4:a2:ff:0f:
89:91:0b:cd:f1:ae:e0:28:89:d6:e7:02:e3:77:af:bc:26:7d:
13:d5:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:04 2025 by rpki-client