Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier: 4d6ZnyI1Efpme3+wWZPTH6kEz1twla1BulgczKiYK+Q=
Subject key identifier: 22:76:6D:F0:08:91:6C:33:C8:0F:9D:69:EB:FA:FE:E2:05:CC:11:44
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 0198D4A7D65B497DD6BD48AA73EB20E0C23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number: 150C
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
7: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=)
8: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: Lw22BnWobvAFizmuBTeNv/52g6pwAe76F+RkBbN55v8=)
9: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d6:5b:49:7d:d6:bd:48:aa:73:eb:20:e0:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=22766df008916c33c80f9d69ebfafee205cc1144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:da:22:b0:38:3d:a7:9b:d7:9b:e0:60:bc:
2d:7f:a1:86:97:35:55:4f:60:ac:16:72:09:9a:51:
91:b9:ee:d0:54:aa:96:fd:4a:3d:b9:5c:a3:f8:47:
b4:91:e7:f5:e4:84:4f:2a:17:38:68:f5:77:0d:85:
8c:71:72:a5:e1:4e:91:1c:08:a9:c7:84:6e:5f:78:
af:00:5e:0f:c8:8a:d7:c8:10:53:aa:8d:e4:e4:f3:
ee:95:5b:8e:31:bb:b5:a4:9e:7b:5d:32:f4:88:0d:
8a:a1:b8:eb:97:f8:ed:63:38:ab:dd:14:6a:ed:5f:
48:b5:64:71:d2:08:d5:21:68:79:f4:c5:15:ec:04:
6c:57:3c:c8:96:b0:ed:cf:50:39:0d:cb:96:ae:19:
6f:fb:36:26:e8:0e:18:45:cd:2f:84:e0:c7:33:65:
86:75:7d:6e:96:fd:44:04:b0:39:28:a8:d4:c6:54:
4f:5b:83:56:59:2e:d7:a7:5c:27:fb:a6:15:44:6e:
65:32:02:11:09:d6:d5:e2:80:d4:5b:0d:ad:ec:6f:
7d:ed:84:83:fd:56:83:1a:ab:66:23:a7:f4:76:bc:
ad:de:29:05:fc:8b:bf:7e:e3:6f:19:51:46:0c:18:
94:00:15:b9:e4:38:56:bc:1a:b4:46:51:ff:c5:66:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:6D:F0:08:91:6C:33:C8:0F:9D:69:EB:FA:FE:E2:05:CC:11:44
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c5:59:90:d6:f0:dd:a8:61:44:5d:e4:5a:c2:d0:7d:0a:f0:
89:7f:6d:0a:9a:0c:82:c1:cb:bb:f2:78:80:80:2e:ae:c6:62:
94:b9:1e:bf:f8:1b:a3:3d:17:cf:14:ad:54:a5:26:04:8e:55:
75:b6:f8:fd:c1:f2:9b:3a:44:72:66:ba:f0:ae:6c:79:18:cc:
58:d1:9b:d2:19:e3:4d:eb:9a:ba:9a:05:63:6f:58:04:62:c3:
04:05:1a:30:9a:39:9a:f4:be:0b:6a:fd:3e:87:13:7b:af:7b:
7a:ae:03:ea:ec:39:54:b5:9f:9b:8b:c4:0e:fd:b0:d8:54:0c:
b6:67:2f:5b:13:e6:62:ae:9c:7b:19:05:85:59:b9:d5:2e:03:
70:16:e9:16:89:a0:cd:79:8f:c1:ac:2e:f2:a8:00:25:f0:c3:
5b:9b:e4:6e:5e:2a:7f:c2:e2:33:9a:f9:be:22:8f:aa:9c:d1:
6c:9e:2a:2c:cd:b3:7c:c4:dc:04:20:bd:3e:35:0f:34:8f:3e:
0a:4d:84:77:f8:a4:ab:a4:bb:52:d9:7a:18:7a:61:c1:0e:54:
f0:8f:77:4a:d6:96:ac:26:b8:68:e4:f5:f7:01:a5:4c:52:dc:
cb:1c:1c:6f:96:24:16:c1:40:72:43:35:1f:a5:45:a0:90:81:
51:79:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:23 2025 by rpki-client