Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: egXO2TbeDr+Y7L+X5tVCSWtGMDr3eswWzdYAsad3JDk=
Subject key identifier: FA:92:9A:A4:B6:78:E2:31:21:EA:AF:92:1F:31:59:76:63:04:35:E9
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 0198D8166F71396DD7D4B30F8BA7CD8E9576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 18:00:05 +0000
Manifest this update: Sat 23 Aug 2025 18:00:05 +0000
Manifest next update: Sun 24 Aug 2025 18:00:05 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: M0Tjw1L9jjbpxiholNjCkXFZVBD+8MNPI7BEnKMZ9Kk=)
2: 3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa (hash: ALMRzRIN48A1/6B9bYTNcvthe8nl2VpZFs9P6rEV/zs=)
3: pQEKlsHKZvyCzhry4IGka8Bo9wI.roa (hash: G6tdo3cOGBpxAVBJYaOYN4vtqsUYuOOcWC30vr8lJRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:16:6f:71:39:6d:d7:d4:b3:0f:8b:a7:cd:8e:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Aug 23 18:00:05 2025 GMT
Not After : Aug 24 18:00:05 2025 GMT
Subject: CN=fa929aa4b678e23121eaaf921f315976630435e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:d7:cf:e8:15:48:65:e6:7b:44:1b:e7:29:
9f:23:be:bf:60:0f:b4:17:bd:e9:c5:fa:39:f2:c0:
cd:af:43:f0:c1:d2:13:28:9c:3b:6d:76:2f:56:d9:
c8:9b:8f:7e:59:99:a2:85:02:67:65:d1:3a:90:cb:
1c:cf:5c:4d:1d:a1:b1:18:fc:1e:59:e7:7c:8b:4b:
51:32:71:5f:75:02:d4:77:55:ea:5f:1c:2a:8f:63:
48:d8:78:a5:1e:13:dd:8f:35:2d:d5:56:af:36:10:
3e:4d:49:4a:40:6d:92:ed:f8:f3:ce:3d:ad:99:7c:
6f:f9:7b:1b:40:ae:85:ad:1e:b4:0c:bc:1a:90:d2:
bc:6a:00:46:d2:90:87:25:c7:2b:38:fa:31:be:4c:
2a:c1:d0:35:97:37:4a:e6:83:fa:9b:cb:4b:0a:d7:
28:c9:fb:6e:45:1b:7a:11:58:2a:b6:49:1a:9d:c1:
89:af:57:0a:0b:ed:ad:93:11:0e:99:1e:12:04:63:
ba:18:02:f3:e2:f6:2a:48:ce:a4:ed:e2:f9:ca:44:
75:d8:86:93:75:dc:e7:e3:07:fa:3c:f8:32:0f:aa:
0e:ef:aa:a2:48:bf:34:1a:d5:28:8c:f0:46:ad:04:
58:91:30:a1:df:5e:1c:0d:8e:6e:d9:31:da:43:07:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:9A:A4:B6:78:E2:31:21:EA:AF:92:1F:31:59:76:63:04:35:E9
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:b8:24:ec:55:84:ee:9d:79:0d:79:b6:fd:b1:56:00:19:
b9:a3:a6:f4:8b:d1:fe:7a:13:91:d7:e8:05:28:41:36:a7:9d:
40:01:c2:32:6f:64:af:02:7a:c7:dc:8e:8d:b9:8c:ae:e9:56:
81:04:c4:92:ad:a3:78:14:bb:be:ff:13:d7:f0:ef:ca:19:89:
18:62:6c:a1:3d:2a:77:7c:a7:ba:ee:d7:c4:e6:13:36:c1:cc:
ce:fc:5e:a0:72:b1:f3:ad:b9:31:1b:74:6a:bd:9a:58:d1:e2:
33:6d:93:b9:38:1a:f4:0f:58:5b:3f:f2:26:08:61:d0:4f:4f:
fa:8d:33:f0:b3:4a:07:d7:9c:37:34:1e:00:77:fd:ac:7f:0d:
b3:6c:e7:14:ce:6f:53:7b:fc:15:00:31:29:43:81:3e:51:4c:
93:ea:a7:62:fd:a8:73:60:ea:70:0f:2b:62:c2:c8:ae:01:4a:
26:70:ed:ae:ac:9c:ae:0f:fe:09:79:3c:81:7f:39:8d:76:93:
67:78:11:1c:45:b9:c6:42:f9:2f:bf:c5:bc:7c:34:aa:62:7e:
fe:b7:34:31:72:c9:40:77:eb:30:93:95:42:af:78:7d:c7:08:
c1:94:ba:10:44:79:9f:f2:46:59:9b:16:ed:82:1f:9e:91:a0:
c8:7d:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:59:22 2025 by rpki-client