Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: SzQ0mWismiLeeNewnZRTEJTuP1C+eNEqeT60pYg1EZc=
Subject key identifier: AF:3E:8F:91:1C:AC:B8:D8:A8:74:0D:5B:EC:F0:6A:5A:2A:91:E0:23
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 0198D73BD1025F9C970FA7B6841FEE691176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:18 +0000
Manifest this update: Sat 23 Aug 2025 14:01:18 +0000
Manifest next update: Sun 24 Aug 2025 14:01:18 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: hq39bFpL5HTdEKod5uTTC3VdWft0yl6O2pZo0k6Dk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d1:02:5f:9c:97:0f:a7:b6:84:1f:ee:69:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Aug 23 14:01:18 2025 GMT
Not After : Aug 24 14:01:18 2025 GMT
Subject: CN=af3e8f911cacb8d8a8740d5becf06a5a2a91e023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:51:61:3d:44:df:94:c1:60:70:b9:59:6e:4a:
82:7e:34:57:a4:e6:17:b7:1f:9e:4e:4a:6b:4e:18:
92:67:98:15:d5:97:63:b4:78:50:d6:c4:fb:a0:a5:
cd:f8:fc:27:81:04:3d:9b:93:78:0d:e6:4f:30:94:
ca:28:65:3c:1e:2c:7b:6f:c8:9c:dc:61:6f:94:1b:
61:d6:b9:63:b1:d4:68:06:80:93:25:77:33:9c:65:
39:70:0a:33:44:3f:18:c3:d7:1c:72:0a:65:56:2b:
94:bc:55:cb:95:0c:e7:76:1b:ec:59:e6:22:fa:b9:
8d:d4:53:3b:c1:d8:39:ab:80:c0:9b:64:94:ad:f7:
5a:d2:2e:9d:c6:94:7d:2c:f2:f7:5a:87:8a:0d:23:
68:99:21:01:54:e5:ff:95:4e:d8:09:2f:3c:f7:41:
72:e3:68:bd:44:b5:be:c2:65:4a:69:49:d2:df:20:
e2:96:c6:5c:a1:ee:b1:cb:69:96:c6:ac:84:8a:31:
5d:ce:06:2e:2c:e2:c7:9f:e6:d0:c1:2d:dc:e8:60:
54:41:52:6a:06:40:81:43:f0:43:2e:9f:35:64:40:
2d:2b:b6:3d:bb:cb:48:69:20:e5:3f:de:88:fa:a7:
0d:5b:d4:fd:2e:a8:60:bc:0f:e0:4a:69:9c:c8:91:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:8F:91:1C:AC:B8:D8:A8:74:0D:5B:EC:F0:6A:5A:2A:91:E0:23
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:74:a5:67:c4:04:1c:6e:7d:1e:84:4a:ee:67:ec:e8:0d:24:
16:26:18:ed:ae:de:bd:06:a8:20:af:69:8b:12:76:94:de:4a:
98:4b:9b:d2:71:88:87:a8:6f:9f:60:1d:0f:5d:ed:a5:d9:c6:
96:b0:f9:22:cf:4b:fd:5e:90:ad:fc:cb:84:d6:38:67:ab:3a:
8e:4f:d4:d5:82:61:36:ce:f0:66:54:ae:8e:b4:35:94:cd:f8:
ed:3c:70:7d:17:c1:5c:97:c0:f4:51:a4:ee:ff:db:27:45:6d:
f6:5f:63:43:26:1c:95:c6:d0:34:5c:e6:93:8f:aa:76:c6:9b:
e1:51:9d:e1:33:0c:8a:3e:9e:a8:27:6a:e1:ba:c8:02:0e:bd:
cc:b0:fe:22:af:d5:3c:0c:8e:bc:47:44:c9:58:a0:9d:0e:a3:
7e:12:9a:bb:d1:aa:fe:65:dd:87:c7:52:53:cb:5e:f8:59:cb:
9d:22:bd:d0:1f:b3:d9:d4:d6:ab:64:9b:01:bb:ab:53:35:69:
5b:68:13:f5:cd:b0:31:6c:68:b9:e9:df:97:99:cb:48:ea:ed:
14:e1:ba:ca:1a:8c:d0:ef:d9:6e:ce:cb:06:ca:b2:95:e3:d4:
8a:9e:20:0f:56:33:d4:44:d0:31:d4:cc:23:ec:7d:18:87:3f:
99:d4:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:59 2025 by rpki-client