Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File: 84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier: L3tzM9pFWOR4iX3XQHqwmg3KEzgOiZTPNkbNMcw9K8Q=
Subject key identifier: 45:74:BC:FD:C4:F8:D7:D4:51:39:D4:8B:E9:B4:12:31:C9:31:46:8C
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0198D62984435883608AD27190D3963E1FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: yUwiO2TUc8nrlNx9U5qdmvdgbimdMbH6M2jtRRj+Nws=)
2: XZxf4Vieor4fQv4nMmlm0UTMEOA.roa (hash: 4QQC4VkFb6jqbwrgCdyeDgHr05+4Pfao8xbDnSrY77M=)
3: ozZE4V4pu8CXUMtiu4vEAUI5W90.roa (hash: p9IVNQ9TpNobGFhvkATSVt/+JVYF+c2vrdj6oFs4kB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:84:43:58:83:60:8a:d2:71:90:d3:96:3e:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=4574bcfdc4f8d7d45139d48be9b41231c931468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:e7:c9:73:f2:37:c4:02:aa:e1:0e:b9:da:
50:70:8d:10:52:5a:fa:4b:eb:00:ea:10:95:50:36:
44:de:8a:c8:05:01:ad:c9:ad:76:ce:61:78:58:d4:
88:83:58:01:e7:68:de:c7:b7:e8:98:fb:bf:58:8b:
22:7a:58:89:50:30:ac:5c:48:42:a0:6f:27:94:94:
96:bc:fb:53:9a:d2:ed:e2:33:e6:ae:83:31:53:5b:
e1:6d:d2:58:82:15:f2:b1:1e:38:1b:02:08:77:3c:
97:d3:29:95:9f:37:2d:1a:56:f5:4d:1f:77:0f:3c:
d8:b5:5d:d8:65:cd:67:04:71:a8:74:90:5a:bb:b5:
f5:75:c1:a2:d5:f2:23:27:28:33:f2:31:e4:a3:57:
29:f4:92:7f:bb:d3:4b:0a:83:b3:b2:46:18:6c:f1:
ac:3a:fb:7e:9d:58:62:69:fa:de:95:86:9a:15:f5:
e4:1f:5c:26:9d:a2:e3:f5:b0:b3:c2:3e:80:d2:9f:
5c:d0:05:91:59:56:fe:d9:ea:63:68:1e:0b:00:83:
4a:3e:88:01:ff:f5:93:b9:71:05:68:54:61:47:0a:
96:e4:7b:3b:56:56:cc:d1:3e:d2:6f:54:80:fe:51:
7b:a5:d7:2d:28:29:1d:f8:68:b6:43:47:24:af:69:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:BC:FD:C4:F8:D7:D4:51:39:D4:8B:E9:B4:12:31:C9:31:46:8C
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:20:19:e5:66:26:8f:ea:20:ed:a1:b2:d5:e6:57:e2:82:0a:
46:52:e5:0c:7d:2f:09:51:e1:80:20:f4:91:29:4c:1c:d6:a0:
77:ee:3c:97:89:4a:dc:ef:b1:bc:1d:5b:e4:1e:0b:54:34:d2:
19:09:c4:78:fa:02:f1:90:77:31:c2:89:00:d1:8d:cb:b8:33:
1e:d8:bf:ae:0c:69:f9:39:9e:f2:df:ae:ec:8b:ee:35:99:64:
2c:cf:a9:a8:81:3e:57:d2:d7:1a:06:f0:ba:48:d3:94:3d:22:
58:1c:9e:a1:17:9e:ea:39:e0:6f:3a:a6:bd:33:43:43:e1:07:
a2:01:98:42:ac:ef:b8:a6:d3:39:37:35:32:75:df:f1:c7:64:
36:9d:4c:a4:05:c1:8b:c8:b1:53:22:88:ed:56:30:6d:6c:4e:
f4:34:0d:41:3c:90:9c:29:0c:16:86:8c:c6:f7:10:7b:29:57:
8c:fa:f1:d0:04:73:42:de:a6:9a:3b:9e:f6:50:be:2e:e8:d8:
03:66:92:9f:ec:43:57:ab:23:b7:25:36:20:b9:9c:0a:f6:d9:
2e:8d:75:a9:9e:d7:2d:ef:00:0c:d2:52:0b:94:69:b6:e8:3b:
8a:ed:eb:60:93:48:e0:d4:7f:06:a7:3c:86:3c:5f:54:85:1e:
78:a1:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:17 2025 by rpki-client