Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier: +z+FSmt0SCJUOKPMyaBlYK0eDQjndY/ZHBfHOO1qKds=
Subject key identifier: 99:3C:45:C8:11:F0:9E:62:9D:46:BA:29:CE:91:49:3B:B8:AB:98:77
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 0198D85081BBBE1848730B786EC7641E17FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 19:03:31 +0000
Manifest this update: Sat 23 Aug 2025 19:03:31 +0000
Manifest next update: Sun 24 Aug 2025 19:03:31 +0000
Files and hashes: 1: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: aT92eTXG6BCqQu84egbORsJh0HllcXAyhf8Rz7+GedY=)
2: DwTC30oaWKwssRCXrBoUlk9Q5bw.roa (hash: ijzA7vHvds3BxvrPMvxvhrjeIw/3n+d/qJzXMvHrD7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:81:bb:be:18:48:73:0b:78:6e:c7:64:1e:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Aug 23 19:03:31 2025 GMT
Not After : Aug 24 19:03:31 2025 GMT
Subject: CN=993c45c811f09e629d46ba29ce91493bb8ab9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:6b:db:ee:e2:2e:dd:16:9c:ef:8e:8a:64:
13:b9:a9:6f:7d:6b:33:68:b7:dc:ea:ab:98:b8:a2:
78:b2:c3:35:df:36:02:dc:e1:b8:33:b7:63:0f:e7:
37:cc:81:b8:e9:00:3d:32:40:04:84:9f:a2:b2:85:
0f:55:13:78:2b:44:04:51:94:61:fe:5b:5a:3b:f0:
81:03:4e:d9:b3:e8:db:02:71:67:e2:0a:52:fc:91:
67:5f:c0:b5:10:23:e0:f2:71:b2:73:d3:1a:2d:c4:
00:2e:cf:15:b4:03:f6:93:44:96:0b:6a:ce:92:bb:
bf:81:a2:4b:7c:52:3f:c8:18:38:eb:6b:99:2c:3f:
df:fc:b4:15:b1:de:5e:f9:d3:61:73:d4:d7:a8:38:
3c:4a:9f:fa:88:a4:08:0d:18:60:88:52:71:31:ce:
e8:5d:dd:80:d3:b8:65:e3:09:67:a4:5d:0f:df:3c:
80:cd:44:8c:53:42:29:f2:59:a2:6d:74:56:c1:ea:
f5:d3:cd:83:06:c8:09:ac:fb:6f:1b:5a:3f:56:56:
3e:68:08:48:c6:98:b9:40:be:cd:54:94:e3:f1:39:
53:28:4b:b8:21:11:50:39:6b:3c:94:79:16:d1:06:
73:ac:7b:01:3e:0e:75:26:b2:17:e9:76:cd:9a:d4:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:45:C8:11:F0:9E:62:9D:46:BA:29:CE:91:49:3B:B8:AB:98:77
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:93:f3:7c:dd:32:bd:87:dd:08:4a:07:7e:e3:8f:da:b1:
5c:1b:47:d2:4c:18:11:ba:fb:08:77:fd:ac:b4:2d:f3:c7:22:
5e:62:4e:da:5b:aa:01:56:40:f7:2c:f8:16:f9:70:ba:b7:c2:
57:7a:f3:87:13:40:5c:bd:f6:43:c5:2d:65:4e:16:d0:e2:63:
d8:dd:c7:65:9b:03:bb:c1:12:fa:43:4e:c8:9b:c6:24:28:2c:
d8:e9:a5:3a:fa:d0:fd:fe:ac:aa:57:f6:02:2b:f0:6d:ec:0f:
8a:b6:e9:91:68:dc:d1:3f:e9:d1:de:11:5a:09:7e:b7:5b:78:
ff:42:93:73:83:46:29:4b:21:3b:3c:ce:a2:45:82:bd:09:0c:
ee:db:15:b0:e1:2e:1d:0e:87:46:f3:a5:cc:37:78:70:6a:c2:
5c:1f:ac:ca:d8:11:68:b3:ba:d6:b3:e0:07:7f:d9:de:65:94:
66:e3:ac:85:9b:36:0a:8e:c6:17:74:8b:74:1a:63:58:ea:7a:
f5:2f:ba:6b:23:c1:f9:e6:e0:c3:20:50:c2:f4:d6:df:09:01:
9d:de:9b:ee:0a:be:99:a0:d1:c2:4d:df:f8:73:ff:49:0a:9e:
07:77:a2:40:40:c6:9f:50:84:58:4b:07:39:89:60:43:b6:6b:
d5:5f:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:17 2025 by rpki-client