Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: kjKA3R+CNaXWXhLo5i4dv+7nqpvNeAKXh3KfvTH8kpU=
Subject key identifier: 9F:89:C3:8E:82:96:A0:00:2F:29:E0:49:9C:C1:72:B4:23:67:80:07
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 0198D73AF963D35EBABBFAF7FC2280F0DF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:22 +0000
Manifest this update: Sat 23 Aug 2025 14:00:22 +0000
Manifest next update: Sun 24 Aug 2025 14:00:22 +0000
Files and hashes: 1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: sVd96Gql6DeFw1wSObqNJV6sUb1TdCYC27rGVYaRcyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f9:63:d3:5e:ba:bb:fa:f7:fc:22:80:f0:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Aug 23 14:00:22 2025 GMT
Not After : Aug 24 14:00:22 2025 GMT
Subject: CN=9f89c38e8296a0002f29e0499cc172b423678007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:9b:82:70:2f:df:47:85:1d:da:7b:5f:23:
ab:80:b6:8a:ef:99:2d:c4:95:a5:3f:93:d8:a2:49:
db:06:b8:56:28:60:8d:60:17:50:dd:8b:18:9c:53:
98:46:9f:1e:15:07:b7:e2:6e:5b:0b:45:38:05:4b:
11:09:4b:fd:68:d8:46:b3:e9:5a:52:51:2e:f2:19:
a3:e0:4a:29:75:bc:05:7a:7b:c0:4f:dd:5a:97:74:
eb:91:f9:58:3b:89:ae:22:55:a5:b2:5a:92:7c:10:
6b:cc:c3:c9:67:3f:3d:b1:8f:15:d9:55:76:de:eb:
14:33:e2:a2:7b:40:01:ac:53:bd:7c:5c:0a:4d:2e:
10:76:09:69:35:0e:bb:ec:72:b8:d9:b5:b6:51:06:
76:bf:5b:c5:4c:ff:bc:be:9d:f4:a0:03:e6:9f:bd:
01:7a:8d:6b:9a:26:2c:f3:64:df:d4:9e:37:32:3b:
13:08:96:d2:ad:76:ff:d4:cf:d5:2e:b9:fd:48:65:
8f:a3:4c:3c:08:c1:08:4d:da:50:44:84:24:a1:e4:
a6:bd:6d:c2:ae:42:38:0c:ad:2d:39:4c:38:93:cb:
01:63:96:c9:8a:8a:81:65:25:4c:b9:90:1f:61:04:
44:e6:1a:8b:be:b8:45:09:73:31:4a:29:1b:89:e6:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:C3:8E:82:96:A0:00:2F:29:E0:49:9C:C1:72:B4:23:67:80:07
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2f:79:41:3a:a1:87:86:57:b0:3e:ef:10:6c:bd:39:c4:47:
da:96:bf:71:50:b1:0a:a4:26:6a:a1:26:ec:35:c4:82:5e:e0:
34:6f:45:ac:31:e0:6b:9c:47:5f:f3:6f:5b:74:81:d1:ce:0f:
34:45:fb:56:60:8b:d3:44:20:ee:0a:a9:75:9b:67:a7:2d:58:
6d:4f:d3:ea:b2:f8:d2:b6:05:68:85:95:f4:cb:3b:34:ef:d1:
d4:d5:7c:d5:60:b8:ad:f2:3a:bd:62:f8:26:12:e5:99:6c:b1:
2c:c5:56:ed:d8:35:1a:e3:6b:27:05:67:56:30:77:81:f7:63:
f0:53:65:01:21:65:49:42:43:0b:a2:11:36:c0:49:bd:a5:2f:
87:95:18:cc:e8:52:af:76:ba:50:73:2b:b9:36:68:7a:5d:b6:
4a:58:b3:4b:63:df:e6:0b:47:ea:be:4c:c1:61:aa:04:90:3f:
cb:da:20:5b:fe:73:68:68:0f:31:ef:1f:5e:98:57:d7:51:bb:
70:aa:e6:fe:27:0a:ed:ae:48:db:24:39:0d:bd:15:73:b3:7d:
0e:6c:dc:db:65:32:d9:c6:19:bf:a1:ae:1e:03:44:77:d0:59:
11:1b:7c:de:81:07:bd:c8:1b:5f:0b:41:e3:f6:f9:3a:ba:f1:
b5:fb:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:50 2025 by rpki-client