Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: djzj/qzL2fAOgVRrp8asUEqH8vLFo4Lew78K/YyEkEI=
Subject key identifier: D6:E3:8F:FC:26:B0:B1:80:E2:1F:AE:5F:E5:F9:FF:78:3F:85:D6:C2
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 0198D4DFD6FAB925B8562107103EC1C74D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: Yz9AijmvBR82ambWUfJb/8GBMruMm8iBy8hyAoEo/gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d6:fa:b9:25:b8:56:21:07:10:3e:c1:c7:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=d6e38ffc26b0b180e21fae5fe5f9ff783f85d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:7d:52:11:a3:e0:e9:22:eb:14:cd:62:55:
3f:10:02:b5:d0:41:1c:2f:b2:13:c6:39:74:51:42:
70:da:74:c8:9b:b7:c7:b4:dc:57:d6:d7:24:73:fa:
fe:1d:7a:00:dc:a7:50:39:c2:32:92:ec:b9:a2:b9:
7e:ad:02:66:ee:f6:78:92:8f:69:e1:ca:9f:a7:ea:
45:c1:e4:7d:3c:8c:80:ee:8d:38:c9:05:2e:38:3c:
47:7e:01:61:ed:e4:0e:fa:9f:93:3a:94:42:ad:2f:
8c:b6:78:35:d2:48:d6:4e:b1:80:ef:d4:62:3f:a0:
9d:e0:8d:93:5e:5d:8d:28:33:fa:4e:61:34:88:c9:
a3:a5:7d:75:5c:4f:e7:f1:aa:43:dc:fa:10:c6:d8:
fc:b4:61:40:45:18:b8:c7:c6:fc:4c:69:c5:47:a2:
19:9f:df:47:a6:9d:0f:53:bb:bd:4e:60:c1:eb:e3:
56:5f:1d:e3:d1:00:99:ec:f6:57:d2:66:f7:eb:31:
f3:1d:af:38:83:c4:9c:32:00:e6:9c:8b:f9:33:8b:
01:04:b9:15:8f:a8:79:4a:fd:d5:7b:60:e8:82:f5:
6e:99:c5:35:14:93:2b:c4:c2:41:87:ac:83:59:32:
47:6b:ec:b8:17:e7:f3:06:bc:e8:7c:9d:5d:df:e7:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:8F:FC:26:B0:B1:80:E2:1F:AE:5F:E5:F9:FF:78:3F:85:D6:C2
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:79:e5:a2:b2:cb:10:30:f9:4c:b1:44:2b:a0:7b:b1:eb:a9:
51:b5:76:d2:b3:9f:3a:00:13:28:e7:14:0c:6b:a8:b0:99:5e:
51:88:80:61:97:96:2b:8e:96:db:5e:c8:02:05:f5:71:e3:f7:
cc:48:1a:a6:91:d8:4f:3c:7c:f2:bb:8e:16:23:82:65:b8:4f:
5f:5c:0b:f5:33:49:3b:b1:86:bd:9a:6f:f3:ea:d9:c0:54:c5:
30:12:f0:a4:e5:31:68:9a:e7:26:c7:b0:89:1e:56:7c:dd:08:
d0:c6:6b:00:26:af:01:cc:a5:56:4b:bf:94:89:72:00:4a:b6:
83:c0:4d:10:c6:a3:b3:81:72:e6:34:c2:9d:11:87:8e:92:b9:
10:a8:3a:00:10:c8:97:fc:f5:76:13:a3:48:c6:a8:f4:73:be:
5f:57:df:fe:76:72:8f:c8:38:80:f1:f7:e3:5d:28:c9:24:7a:
84:32:f6:fc:dc:12:96:7b:6f:b9:ef:79:f3:26:1c:e6:20:c5:
5b:53:7c:bb:c6:33:76:c5:8a:4c:77:17:d4:18:77:3f:3b:09:
1d:5c:9f:29:2c:ed:a7:bd:b2:5e:2e:e5:81:02:98:81:73:1b:
e8:7e:36:49:42:91:f1:5b:4a:dd:e3:20:d2:7b:47:8a:41:55:
36:d9:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:04 2025 by rpki-client