Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: yjkcOTCi/dSRckexizQ7fKoOx7V/+ZvAPHtZuRmkf/A=
Subject key identifier: 95:2D:60:07:2D:DA:DE:5D:F9:E8:EF:6E:CD:7D:38:4B:09:63:3C:64
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0198D4A7AFE374A40FB7B19DF80B01EA20F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: IX3sv7fY5li4BAqwQxGwFlBefOPj/iOqWQkQ99EqTLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:af:e3:74:a4:0f:b7:b1:9d:f8:0b:01:ea:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=952d60072ddade5df9e8ef6ecd7d384b09633c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:a7:67:66:92:1a:e4:97:23:dd:0d:a8:5a:
31:8e:e6:f0:8c:4f:0c:18:a5:2e:89:55:7e:d2:49:
74:15:0c:2b:96:24:40:0f:a2:11:5c:80:9d:30:6c:
75:fd:1d:57:bc:21:e5:c1:3e:e2:66:aa:b6:7f:f6:
87:4a:f0:18:07:02:91:af:24:50:2d:46:84:2a:d1:
95:b9:c9:4f:79:de:75:54:ca:27:51:0b:bf:33:77:
7e:89:6c:fb:85:35:e3:11:05:cd:9d:b9:90:4d:76:
ff:db:d8:71:af:32:d2:f4:ef:1c:f9:18:4b:55:91:
20:a8:bd:0e:ae:f5:1e:d4:b1:df:9e:4a:d6:83:08:
f9:2b:66:7e:5a:aa:ec:12:5f:0c:e2:3f:73:43:0a:
0d:67:cc:63:9b:db:cf:c9:26:3a:23:90:1f:f1:be:
8c:2b:4f:3d:a9:9f:50:ba:42:52:88:97:44:a8:7c:
a0:df:70:b8:51:37:32:6e:4f:ff:32:49:50:f9:3c:
9a:da:15:99:91:1d:db:40:ac:ed:6d:8a:56:4a:c5:
b7:fb:63:bf:41:d5:5b:a4:69:94:1e:98:bd:05:43:
6a:81:58:5f:ac:6d:38:4a:59:7a:24:b3:49:00:59:
09:c3:e4:37:27:77:74:e0:4c:04:23:86:77:c1:76:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:60:07:2D:DA:DE:5D:F9:E8:EF:6E:CD:7D:38:4B:09:63:3C:64
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:d1:dc:85:8b:54:66:d6:e0:52:50:09:96:65:23:97:eb:
8d:e6:25:08:d8:d7:70:ae:aa:97:ed:1e:3e:5d:ec:af:98:08:
90:20:7e:43:8b:7e:ae:fb:d9:4b:43:bf:bb:ca:b5:b3:10:f8:
a9:6f:9e:8e:70:dd:6a:58:c1:58:22:62:be:d0:dc:e4:03:dd:
08:fc:51:83:2a:11:a8:6a:0d:97:28:6f:52:29:66:7a:9b:31:
df:79:3f:fd:74:d6:26:2c:44:27:ae:e0:8d:e7:79:0b:46:70:
7e:16:24:aa:e0:3d:d2:4f:05:a1:64:40:d8:eb:af:d4:e8:0a:
db:ce:6d:62:bb:cc:89:b2:ee:95:9b:1e:ed:b7:c3:79:35:56:
66:af:4d:c1:87:1c:ee:d1:74:ba:bd:b3:6a:eb:a3:f0:e5:29:
2e:a3:3b:ee:7a:b0:af:41:1c:81:61:d2:e4:46:aa:0e:63:c0:
47:4c:fc:69:2f:07:19:64:45:25:1e:1e:94:43:c8:4e:46:98:
dd:97:68:58:73:b3:3f:c5:27:14:3a:a1:84:07:9f:44:02:91:
7b:9e:2b:bf:57:3c:ec:6d:f0:e9:2e:f7:a9:16:d1:36:71:60:
8b:9b:8e:6f:e4:80:fd:a8:ab:a8:ac:09:a4:cb:64:41:71:67:
86:f1:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:51 2025 by rpki-client