Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier: 3qB3BAcFWLpdA1jwhacjDbDpVspG7NpHcXWQsMJ/tdU=
Subject key identifier: B8:20:B2:5D:3A:26:D5:00:A5:87:B1:A9:17:09:32:81:57:6C:A3:20
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 0198D6CD580A66D0681CFB07471E714E8455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: 8o+9ihzqWw8660+Nxa/bXCbQrkLi+WWTa4KE6TR/S2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:58:0a:66:d0:68:1c:fb:07:47:1e:71:4e:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=b820b25d3a26d500a587b1a917093281576ca320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:78:59:e0:7e:d1:84:83:47:e3:36:a9:0b:
9c:82:ab:67:e5:d3:22:6c:93:25:23:dd:83:43:1d:
b9:33:33:57:0f:28:5a:53:ee:92:5f:96:ce:1c:f7:
2b:b0:09:8c:ed:87:73:28:0e:59:96:37:d7:ea:86:
9c:f2:e8:24:27:b8:b4:fd:0b:08:5d:31:d4:a1:dc:
b2:11:ec:e1:4d:5b:94:ff:66:8d:90:e0:b6:0f:7c:
f4:76:56:95:e8:6e:72:96:94:20:a2:64:4a:a7:7e:
14:59:5c:bd:e6:dd:3b:f2:c6:bc:26:c6:9b:8e:9c:
35:9a:4e:64:bf:88:ed:7e:44:b5:cb:3a:73:f4:e0:
b7:d7:a1:10:6a:14:74:7a:8a:8c:29:57:54:c8:3c:
42:ca:e4:89:b8:bb:f0:45:b5:15:3e:3a:7a:11:a0:
ea:fe:c5:a7:10:98:63:06:c6:da:19:3c:38:d2:f0:
4a:6c:b6:e2:f1:4c:54:cd:f4:cd:93:59:34:48:f4:
78:cf:da:db:c8:28:96:ca:4c:b8:a7:81:40:91:c4:
bd:e2:45:37:50:98:04:b4:61:72:eb:41:8a:cc:ef:
4b:10:6e:f2:83:0e:bc:68:ff:d4:af:a9:77:dd:6a:
f1:fa:b7:f4:23:07:1f:03:95:45:59:d3:16:c7:00:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:B2:5D:3A:26:D5:00:A5:87:B1:A9:17:09:32:81:57:6C:A3:20
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f2:11:81:97:86:3c:c0:e9:1c:f2:5d:24:f6:28:72:44:b1:
21:5a:6a:ff:9a:05:c6:46:da:05:c7:a0:a9:bc:3c:33:e4:ae:
65:e9:44:a2:72:b2:88:85:e9:f5:04:7d:41:c6:41:cf:91:00:
1a:c6:0e:91:21:1a:91:15:89:ca:ec:93:6f:2e:23:ab:e4:83:
c8:61:92:10:03:5e:65:f0:09:e5:e4:c7:29:34:70:25:33:5b:
66:c4:44:8a:80:f5:76:64:30:8c:1f:b4:ad:aa:49:0c:ea:20:
1e:a4:16:7f:fa:e5:55:68:bf:ab:f7:e4:83:23:8e:00:b9:45:
5a:0f:e2:60:38:f0:9b:dc:e5:5c:01:72:ff:e7:df:f8:d5:1f:
b4:9c:e7:51:34:8e:f9:6a:35:5d:fb:08:ed:65:b9:43:c5:48:
2e:48:10:17:0b:be:a1:b4:7f:e4:c0:e6:b9:59:84:07:52:0f:
7c:e1:f5:82:f6:c3:5a:ed:d2:93:69:bc:c8:88:57:42:43:2b:
0b:e5:55:26:93:c0:70:e5:fe:ed:e6:c9:ed:da:44:1a:d0:a0:
ef:77:6e:91:e5:85:9a:f6:6a:74:94:6a:5a:7c:4c:84:e0:7c:
52:a8:10:2a:8a:19:97:cf:95:af:d8:54:ae:8f:d2:12:23:21:
63:f1:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:19 2025 by rpki-client