Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: GY3v6CoNNFUTMcfItlMmFjzkTuqZ6DAfO1bNxPl6sq4=
Subject key identifier: BC:E4:75:45:C7:37:CC:3D:EB:E8:66:76:5D:37:57:5E:A3:A5:AD:F5
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 0198D54E5AA136722B26EF330ED346C9E470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: g4vpV1Q7R/rEwYEeIKpyEviBAahTw5aJ0HMvNFfEMWk=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5a:a1:36:72:2b:26:ef:33:0e:d3:46:c9:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=bce47545c737cc3debe866765d37575ea3a5adf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:7f:8e:bd:1e:6b:49:22:fe:bb:f8:1a:82:
6d:8c:fd:2f:4d:87:dd:8e:79:19:0c:cd:7c:45:37:
17:22:a8:5f:b9:18:fa:3d:b1:aa:90:29:b8:aa:6b:
ea:10:75:db:a0:1d:ce:02:ef:f2:aa:80:c4:81:d5:
1e:39:79:4f:a5:d6:7d:34:08:64:11:fb:31:66:7f:
38:a1:fe:a5:1a:25:2f:01:8a:2c:4b:5c:bb:49:a7:
a8:cb:cb:38:6f:c8:82:db:53:ec:88:ea:db:4b:66:
5f:8f:47:91:71:f5:d2:f5:97:fe:d5:78:63:3b:ad:
e4:99:d9:49:7a:d3:5e:e2:12:d1:ae:6b:69:81:ef:
4d:1b:d3:f8:74:4d:44:f9:f4:d2:1d:c0:1a:04:83:
43:7b:e4:c0:a4:65:85:27:47:62:14:94:1d:5b:b1:
e3:3b:89:c7:ee:5c:2b:80:9f:bf:24:ac:5d:66:39:
ff:8a:69:9b:c6:94:44:f5:bb:4a:62:d7:20:17:13:
a4:24:7e:44:e5:d2:8a:4c:79:5b:ba:f1:7b:82:50:
c3:dc:b0:e0:a9:ee:1a:ef:24:9b:76:21:2b:7f:e3:
13:98:7b:cf:0f:40:f3:db:bd:d9:6f:27:3a:a1:bb:
17:ff:c1:40:3e:84:8e:1a:81:84:0b:54:1b:42:7f:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:75:45:C7:37:CC:3D:EB:E8:66:76:5D:37:57:5E:A3:A5:AD:F5
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:b9:d9:f4:9f:26:ac:14:11:dd:0e:48:f7:5a:86:9e:01:
ea:de:16:b9:13:7f:11:51:ea:c2:6d:87:99:39:26:54:a1:a9:
8a:ec:41:22:89:e4:41:b8:3d:a0:18:1e:1e:6f:62:f3:1d:05:
dd:aa:2f:ff:ee:5b:77:5f:49:a2:19:b4:32:7b:bd:62:72:5f:
2b:89:34:f8:04:56:0a:62:bc:f7:99:9b:b2:18:d2:e2:2e:46:
2c:82:49:e7:c4:c1:a9:bd:06:83:83:01:a5:4e:84:65:f8:60:
49:58:e4:99:c8:5d:47:02:bd:fe:8d:de:91:74:38:21:8e:79:
8d:77:56:7c:07:13:af:78:c2:e3:ce:e2:58:4f:bf:70:47:90:
bc:9a:4c:90:9b:11:47:b4:fe:66:8a:7d:8c:bf:db:57:d2:dd:
b6:d0:91:f6:09:fa:01:7c:be:b0:2c:44:d2:7e:ca:98:d2:a6:
60:81:5a:a9:9b:72:96:64:ef:53:41:c1:cc:1c:c4:e4:35:07:
cf:5e:e1:f2:85:61:fe:bc:22:b8:3b:93:30:1d:60:94:21:97:
02:16:b8:9e:f3:e0:98:4a:6a:2c:45:76:53:8f:67:22:0c:e4:
c7:b0:8e:4f:e1:76:fd:d8:1d:05:71:a4:ef:4c:63:56:e0:f1:
49:bd:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:07 2025 by rpki-client