Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: C2Kk1sbfO9B6UK6+F20ZFk36ZZ0UcN1Ju0YOv8TbpZM=
Subject key identifier: 2C:13:9C:86:83:54:8A:4A:DA:FB:4B:11:7D:59:95:C7:5E:DF:E1:24
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 0198D5F1605E1E143061D7862B4A1E9DF134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: Qls35fsHv23DR/tyYmvjfXvch6dRlGhm0YWi4uVl+QA=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:60:5e:1e:14:30:61:d7:86:2b:4a:1e:9d:f1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=2c139c8683548a4adafb4b117d5995c75edfe124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:15:ce:de:ec:d2:3c:4c:39:34:58:e1:f0:
5f:35:d2:fc:67:83:6c:72:c6:28:9c:33:d0:be:a7:
9d:f7:6a:44:7c:b1:71:c1:a5:2d:01:95:3d:da:66:
2e:26:d6:e2:2e:7b:0a:9d:d6:e4:2d:39:75:a0:ad:
47:9e:25:a9:5f:b8:ba:48:74:ee:99:df:e2:b0:4b:
c2:4b:cc:4d:10:2c:0e:c3:57:5f:f6:7f:4e:94:d8:
24:df:b9:dc:26:24:4d:f3:9b:f5:dd:46:7f:0b:a8:
6c:46:3c:a1:7e:d9:bf:ba:7e:72:60:d5:a5:8a:18:
02:bf:ef:da:5d:76:20:9f:d7:4d:bb:aa:4a:a1:03:
00:43:76:4a:0c:8c:4e:41:b4:57:50:ba:c1:f9:d2:
4c:df:48:d2:ab:75:9f:5c:33:d3:60:f1:a8:05:71:
65:2a:eb:94:57:66:3a:d4:04:4d:8e:5f:17:ba:e4:
f2:17:17:d5:56:af:81:46:42:16:bc:49:2b:38:49:
58:1f:5c:67:cb:62:a8:0a:45:07:37:0f:0b:26:bb:
78:11:db:90:e9:5d:0b:98:67:1d:1e:88:8b:ac:46:
46:65:81:da:88:fc:fe:30:fc:9c:80:14:54:59:06:
4e:c7:54:d7:e1:df:c4:94:df:be:a7:7b:d6:bc:9f:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:9C:86:83:54:8A:4A:DA:FB:4B:11:7D:59:95:C7:5E:DF:E1:24
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:12:c4:7e:14:6e:64:4c:9c:8b:5d:ce:43:44:36:f9:df:
59:dc:f7:a0:23:df:e9:d7:23:d6:d2:d0:a6:58:4f:bf:ee:9a:
5a:92:ac:aa:00:84:57:03:2d:74:54:1b:87:86:06:2c:b9:5d:
dc:2e:10:e2:5f:3f:bc:28:93:95:3a:f9:7d:41:d7:da:47:8d:
b1:6b:ff:e6:c0:26:f3:dc:34:d2:ae:46:6c:70:de:d7:73:ad:
fc:23:a2:16:a2:0d:a9:4c:65:ab:d3:b3:10:e6:14:a7:25:05:
1e:f4:e4:6e:77:6c:61:0d:f1:70:c9:be:5e:ea:1e:e1:f3:22:
3c:91:18:7c:25:2c:00:5a:10:f5:95:93:8e:09:31:e3:b9:57:
2c:9b:8d:ca:e3:00:5e:15:1f:1c:de:56:1e:3c:cd:67:b8:41:
ca:82:45:da:38:20:49:a5:d4:4f:00:76:7a:2f:b6:fa:e2:0e:
65:3f:97:7b:cf:7f:13:33:d7:42:4c:f2:60:b4:9e:24:fb:c4:
a7:28:3b:23:58:79:10:49:a4:da:fd:29:8a:2e:93:21:77:82:
6d:0c:51:01:d8:43:1f:9b:d9:f2:be:51:2b:88:3f:fe:e5:74:
7f:c2:06:45:c0:5f:6a:6e:69:b5:cd:81:14:bc:ef:98:ea:fe:
fc:69:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:02 2025 by rpki-client