Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: uhpX5xY1TUmPqA4cYI/bhoE81t25o4vYzJAKwlEXELo=
Subject key identifier: ED:CA:4B:C2:09:9C:81:B8:71:CB:E0:F3:30:42:EB:6D:A0:43:04:3E
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 0198D474A11E322E01AE6F308D7B2BE2770D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:04:29 +0000
Manifest this update: Sat 23 Aug 2025 01:04:29 +0000
Manifest next update: Sun 24 Aug 2025 01:04:29 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: C48mRQcW27x8M6R8ujn/nFJlh9tyXvVChK0tb1Da4hI=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:a1:1e:32:2e:01:ae:6f:30:8d:7b:2b:e2:77:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Aug 23 01:04:29 2025 GMT
Not After : Aug 24 01:04:29 2025 GMT
Subject: CN=edca4bc2099c81b871cbe0f33042eb6da043043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:4c:e4:a8:0b:d4:c0:59:56:eb:ae:5f:e2:
6e:b2:f4:76:c5:85:9f:26:b5:f2:70:9b:42:25:1a:
53:ac:76:37:2a:d3:0c:b2:4c:2b:ae:32:2a:0d:03:
94:55:05:63:d1:5d:4c:43:36:1f:0f:62:04:88:9f:
13:82:d9:76:20:13:69:7f:be:64:48:79:85:6b:65:
1e:5e:33:f2:3a:80:19:68:67:e5:09:ee:97:4f:4f:
fe:28:f3:8a:6f:24:36:42:cf:10:d5:7d:5d:ae:b0:
7f:b4:82:3b:af:ff:bc:a7:c8:e3:08:0a:cb:5a:df:
6e:d3:14:0f:40:a2:8c:eb:bb:b1:67:d9:26:4c:50:
a8:27:28:d7:55:07:62:c8:07:6f:db:54:09:eb:17:
2b:f7:89:a3:5b:5d:82:49:79:1e:b6:40:cc:e3:e2:
2d:3f:9d:97:12:1a:a1:27:ff:64:44:37:92:4d:5e:
c2:b4:60:c7:04:0f:bb:53:3b:2a:e9:19:0c:b7:75:
8d:e2:90:e0:c4:9b:48:ae:b5:87:90:09:51:88:01:
51:7e:e5:02:0c:4c:57:53:8a:b2:f3:7e:5f:5b:9a:
a2:d5:67:1f:c4:b8:a4:60:c0:27:bf:ba:cf:d9:ea:
ad:15:32:d3:b8:14:7e:c0:a7:a2:b6:f4:ab:42:80:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:4B:C2:09:9C:81:B8:71:CB:E0:F3:30:42:EB:6D:A0:43:04:3E
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:01:b1:bf:8a:24:79:65:bd:50:89:94:3c:cc:07:4f:eb:b3:
cb:79:2c:7e:87:58:d3:11:11:9f:c7:35:e3:ce:8f:a2:9c:59:
e2:2c:a0:d3:ae:8c:84:cc:23:af:99:51:63:93:27:f1:b7:66:
0e:0d:d6:33:16:47:96:2d:c3:68:c2:68:09:d5:66:80:25:48:
0b:4c:16:d3:c2:59:ab:9a:df:9d:44:18:45:2b:56:4f:54:ae:
c9:04:03:0b:e8:37:99:47:10:b0:a2:bd:33:fa:98:4c:cb:25:
72:30:e0:e9:55:b0:57:ec:72:3c:57:5f:b1:dc:ad:d2:b3:4d:
08:5f:cf:f1:af:a7:53:8b:21:f6:01:1a:38:39:1d:26:fc:ba:
5f:a7:77:c5:91:12:f4:6c:08:77:e5:64:b6:5d:e7:6b:9d:b1:
ee:2d:7d:7b:fe:3b:97:55:cd:83:db:09:55:74:86:ee:f1:5a:
46:c4:2d:48:e7:0b:71:96:5f:51:43:ab:86:3f:85:2f:17:2d:
5d:76:3b:d1:4d:81:59:fe:af:26:2c:ba:20:12:cb:be:d7:36:
97:cc:af:72:98:cc:a4:92:0d:87:58:f3:18:d3:25:35:bc:8b:
d1:73:31:d8:ec:67:85:54:d6:6c:f9:a4:d9:77:fb:01:f5:11:
6c:7f:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:40 2025 by rpki-client