Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: sV6Pl9akCeUJLQQlFhd+6cFfhSG0cJAd0rn1WCUmRW4=
Subject key identifier: F2:F1:9C:F4:C6:32:BC:D9:82:40:FA:0B:6C:AF:05:6D:59:FF:DB:1D
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 0198D4DFCCCE8F96DA4E13A082B23E8A9431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: 2Pitdypog6bvFSL1dNHpKLlkqG7cKM0ynGaTbTZ0SjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cc:ce:8f:96:da:4e:13:a0:82:b2:3e:8a:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=f2f19cf4c632bcd98240fa0b6caf056d59ffdb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:d8:16:7a:27:f9:67:97:b1:b3:c3:0b:e2:
f5:45:75:4c:be:eb:7c:6e:9e:c8:8c:18:4c:16:18:
3c:19:9d:40:d7:46:b4:6a:52:dd:84:c1:6e:4a:ac:
39:0a:e9:31:9e:9c:9c:0d:a9:3f:6f:a6:63:5c:42:
9f:c5:cf:13:62:a5:7f:ab:9d:44:0f:d2:35:7f:18:
f9:62:49:5a:00:a0:33:4f:8a:fc:7d:9b:84:80:42:
f1:e7:5b:a9:6c:65:b6:5f:5b:f3:90:8d:8c:70:45:
48:16:a1:4b:a2:16:06:ee:d3:1a:96:b3:7d:94:f6:
70:16:31:68:bc:79:c0:ac:ce:35:2f:dd:cd:64:33:
40:b0:b9:bd:86:e0:c6:7a:f9:f8:cd:ed:11:a7:2e:
55:60:ab:bb:57:63:b1:25:c2:0f:11:e1:3e:79:4e:
5a:59:52:dc:4e:69:17:9d:a0:39:e0:2c:c4:dc:b1:
40:44:c4:8b:66:8d:6d:6d:1b:bf:85:9e:14:84:30:
94:0a:bc:c6:ff:fe:b8:18:e0:ee:28:5d:e4:69:55:
6a:71:6f:dc:b2:5c:22:87:f9:f9:10:1f:98:19:0a:
3e:a0:60:d2:38:74:6c:08:21:e1:8a:9a:fe:6a:17:
8d:ba:fe:bd:40:97:91:9f:9f:44:b4:59:e3:7c:f7:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F1:9C:F4:C6:32:BC:D9:82:40:FA:0B:6C:AF:05:6D:59:FF:DB:1D
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:c0:f3:92:03:46:89:e8:14:87:74:d4:5b:e0:1d:f3:64:
16:22:fe:6e:e3:c7:27:26:64:86:80:4d:14:17:aa:f1:b2:58:
22:4e:fc:ff:9e:86:34:ea:b2:c5:73:a6:95:bd:54:89:13:95:
f7:d9:75:e9:22:68:c3:14:ea:3b:61:fa:36:31:17:a9:b3:d3:
bb:35:5c:2c:8d:b8:12:12:fb:ac:23:fb:05:2e:c9:38:7a:5a:
38:3c:db:e0:44:57:73:3d:e5:10:ca:c2:ad:2a:9a:8d:c7:a4:
22:aa:78:44:51:a8:19:91:05:31:1f:ae:93:e3:de:49:58:53:
25:63:bc:ff:e1:35:78:21:22:64:59:ba:95:34:0e:df:30:51:
1d:10:61:db:e4:d2:a5:3e:4e:06:9c:d5:a8:3f:f5:0a:c6:b5:
30:f6:e0:af:fb:6b:61:ce:47:55:25:23:3c:db:ba:02:91:9b:
a8:98:12:f1:0a:6b:ce:38:c2:34:29:b0:61:56:73:e6:0b:02:
14:37:48:c5:fb:00:96:ae:67:2c:3d:17:ca:85:b7:91:0b:6d:
1b:ce:4f:b6:dc:90:1d:3f:54:cd:d5:c7:15:46:77:63:4e:a3:
b2:d1:d0:b3:88:ed:12:a0:37:12:c1:fe:61:2b:2d:03:69:b1:
ad:f2:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:12 2025 by rpki-client