Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: QT1kS4F8PT3Ldwz98i6qWgWxnUqJLDlhJoZsvF/Nk9U=
Subject key identifier: 17:6F:FB:CF:A2:F0:D0:93:01:A2:C4:B3:06:BF:35:4D:F9:8D:9A:E3
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0198D404B911C534E353C047A63F576AA9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 0A0A
Signing time: Fri 22 Aug 2025 23:02:15 +0000
Manifest this update: Fri 22 Aug 2025 23:02:15 +0000
Manifest next update: Sat 23 Aug 2025 23:02:15 +0000
Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: snUXCy2EFR6WcUer7R6ql1PO/waVF9A/VOBt446wC74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b9:11:c5:34:e3:53:c0:47:a6:3f:57:6a:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Aug 22 23:02:15 2025 GMT
Not After : Aug 23 23:02:15 2025 GMT
Subject: CN=176ffbcfa2f0d09301a2c4b306bf354df98d9ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:61:16:4e:ff:dc:37:a3:05:01:fe:7e:80:
5d:3e:19:fb:4d:b5:53:01:98:75:ec:df:7f:fe:a3:
ce:42:77:4e:2f:2e:19:cb:b0:86:14:5f:fa:05:91:
6b:97:ba:f7:c3:8f:ce:21:a0:6f:90:9f:25:7e:84:
cf:fc:2c:4c:b2:88:ca:31:b5:59:77:25:86:3b:b8:
20:b5:7a:5f:3a:77:57:06:53:3f:4c:ea:15:52:d5:
ef:02:7e:3c:c5:68:92:64:80:39:59:91:e0:eb:8e:
e9:e1:a1:2e:d4:ef:e1:1a:af:b5:e5:db:88:96:16:
0a:73:11:36:5f:cd:fb:2d:6e:c2:2d:88:57:91:ed:
85:9b:b9:92:7f:e3:26:6e:6e:da:bd:d3:f9:b5:94:
8a:46:15:e4:84:65:0a:86:25:e5:4f:f1:f1:6f:6f:
38:41:7a:86:b7:56:f2:fb:a6:ef:0a:4f:98:b0:1e:
26:17:39:11:c0:ee:56:27:5d:bb:f0:76:2c:54:fa:
21:07:e8:e9:65:f6:08:3e:9a:c2:8f:d6:40:37:58:
f0:42:bc:70:e8:b8:96:59:94:5c:f8:17:af:be:80:
4c:71:31:34:b7:53:46:e7:c7:84:cb:49:e7:eb:36:
2e:b5:a9:46:71:46:eb:8d:74:55:a0:e6:02:7c:2d:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:FB:CF:A2:F0:D0:93:01:A2:C4:B3:06:BF:35:4D:F9:8D:9A:E3
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:f3:8f:a3:38:84:83:2f:26:f3:b8:cd:c2:3d:89:4b:05:
28:8b:fd:fc:36:3b:c5:9a:67:09:5f:c6:75:91:83:d6:28:6f:
32:ee:f6:c2:b6:d9:2d:e3:70:c7:cb:80:3f:c9:91:41:aa:80:
db:79:c1:74:26:e3:e6:c0:a0:08:3c:d9:a2:11:f8:06:e3:60:
46:fc:16:18:8e:82:b1:7e:43:6b:d3:6c:7e:08:6a:e7:c8:7f:
1e:55:41:df:c4:84:9f:ad:ed:85:b2:06:80:1f:2e:30:26:8c:
9e:a8:89:e4:87:d2:12:98:3e:80:1b:0e:5b:ef:0f:c4:94:d5:
7d:f5:4c:eb:40:17:6e:de:44:87:c4:6f:f9:4d:e1:9d:f5:98:
49:ae:19:ec:b6:98:f4:4a:77:a9:a8:db:eb:29:d6:a6:45:46:
d8:ec:75:d4:ae:5e:97:cb:dd:3e:5a:1a:b6:ed:e6:ec:74:64:
85:ac:17:8c:45:5f:10:9e:af:5d:c9:02:87:ec:84:55:0a:d9:
77:26:cc:57:22:45:29:4e:0a:58:ff:3b:97:b9:e6:8b:71:c6:
b8:7c:4e:a9:c8:d7:a2:57:90:c1:41:92:9c:73:c5:10:cc:1a:
8b:b8:9a:98:c6:dd:00:9b:29:7b:f4:a0:0a:65:8c:82:d6:8e:
54:bb:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:14 2025 by rpki-client