Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: EY3sCOrxUIEv0u8S8d8M2n2YjImAxzl6KGpN5s5wbsk=
Subject key identifier: 88:54:3C:9B:3F:CF:2A:52:A2:67:43:76:B2:58:6F:87:7D:07:2D:0B
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 0198D5F1C163F491468E99E1A9A92EC027D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: 4n2SR371IxO+wce7FWS4Ew2SFrqrRkgtqH7qe5utM6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c1:63:f4:91:46:8e:99:e1:a9:a9:2e:c0:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=88543c9b3fcf2a52a2674376b2586f877d072d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:e8:c8:71:6f:e1:fb:30:06:dd:c0:4b:d1:
7f:25:34:97:85:68:17:52:c8:38:cf:79:f6:0b:8c:
cd:07:42:5f:2f:7a:1a:80:3a:d8:24:79:8a:11:d0:
83:80:81:ff:30:26:d8:8d:95:f6:fa:b0:f9:8e:4b:
ae:1a:75:ae:b6:e4:36:11:62:f1:cd:11:b8:12:a0:
e0:90:49:02:22:61:72:a7:8d:d9:60:65:07:5d:39:
e0:ad:5e:2b:a8:01:79:45:31:1d:d1:21:69:c9:32:
4f:9a:22:61:19:97:ae:bb:01:f7:36:dd:0d:81:92:
93:dd:67:86:09:1d:1c:fe:79:ed:ff:f6:8c:2c:f6:
05:56:52:cf:f9:36:85:73:c5:39:3c:f6:30:06:19:
03:d1:0b:b0:c2:ef:b7:75:1c:cc:c8:6e:4a:35:15:
0f:97:46:d5:05:86:cd:66:f0:61:6a:b3:68:b3:2e:
3f:08:54:d1:40:da:50:cc:3c:55:a1:a8:fa:d3:96:
4b:d9:eb:e1:a4:23:a7:fb:fe:20:ec:ec:85:39:96:
36:40:16:2c:13:4e:5f:ed:fc:98:8e:26:fb:3c:8c:
82:bc:f6:ea:04:e4:d4:f1:80:0c:1e:31:cd:28:82:
24:12:bc:38:a0:2c:b8:81:f1:05:a5:09:5b:cc:f9:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:3C:9B:3F:CF:2A:52:A2:67:43:76:B2:58:6F:87:7D:07:2D:0B
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6d:0c:85:2c:b4:1d:08:13:1d:bd:c4:ca:e0:a1:37:e9:19:
bb:d0:70:75:2f:e5:03:2b:21:2f:0a:09:6b:15:c7:f7:fe:55:
ad:6e:2f:06:00:7f:c8:21:3b:48:af:2d:75:d1:93:ae:a6:eb:
3a:77:e0:d0:a3:28:bb:c3:7b:c2:e9:20:83:2c:94:e4:f1:70:
07:83:32:1e:b6:7b:4a:58:0a:12:d7:7a:09:65:2b:08:91:cf:
3a:c5:3b:98:de:a5:60:83:49:20:ba:eb:a0:6b:57:68:eb:cf:
7c:db:d1:ac:17:58:73:f6:f2:40:3c:9a:b0:69:d4:a2:66:bd:
d5:49:56:07:42:92:ba:fe:26:97:c7:3e:a0:5f:ff:6f:52:e3:
6f:20:42:9c:6b:ed:16:63:7f:50:fc:bb:12:4a:14:6d:0c:d8:
ec:16:af:69:6e:0b:eb:2a:ac:11:16:6f:e3:84:b0:73:84:d5:
d7:5f:71:17:2a:c3:c3:b7:86:d2:94:59:84:e2:93:e3:da:0c:
96:f7:42:af:5c:1c:21:94:2c:15:c0:e4:a1:a5:e2:bb:9a:49:
1b:dc:15:13:87:60:b4:05:96:0b:b1:b5:ef:2b:7a:bd:82:51:
5b:e3:c4:c0:94:9d:5a:a8:5b:b8:38:c6:c9:32:c5:57:31:57:
25:70:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:45 2025 by rpki-client