Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: wslTqSav5twWzw8b6n1r/JuuCU46GMu8wTDRqeff9Jc=
Subject key identifier: C8:56:D3:74:DB:46:C7:EE:47:5C:DB:33:F6:6D:22:D0:76:70:26:AC
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 0198D5F192BF29CCEE3BCABF032EB38B885C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: 2wuyO9ADJ0+W2verS+riDL1hd0N5dEHxpAVg2oh2yjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:92:bf:29:cc:ee:3b:ca:bf:03:2e:b3:8b:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=c856d374db46c7ee475cdb33f66d22d0767026ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:9d:7d:9e:a3:0b:19:e4:f4:96:8d:44:a2:
58:0d:29:3e:4a:4b:7b:34:8a:3b:ea:56:75:08:f1:
2a:95:d5:ec:a5:66:99:f8:56:ee:06:f7:e1:96:c3:
47:64:19:49:45:69:cb:5d:77:53:31:3f:8a:cd:dd:
bc:a3:7a:08:67:58:b0:51:f2:b3:b6:97:64:ce:95:
c7:12:08:9f:98:32:ce:94:fa:42:d2:0a:22:37:99:
f9:6d:9d:75:ac:c6:98:8a:fc:d5:49:c9:b5:df:c7:
59:18:61:53:00:d7:f0:88:bf:41:c1:c9:21:67:70:
24:9d:33:57:da:dd:ba:a3:08:9a:9d:93:41:66:9a:
38:a3:56:45:70:cf:1f:dc:53:28:5f:86:e1:12:89:
62:22:90:2a:32:f4:de:9c:9a:29:86:a9:da:18:79:
58:0e:4a:7b:0b:17:d3:ae:6f:9e:5d:91:d7:f4:fa:
ee:1f:a6:8d:91:85:7b:11:08:65:50:c5:d9:30:c4:
0a:e7:f6:f2:26:b2:c8:3e:fe:a9:a7:0a:74:f4:58:
eb:0e:33:0e:3a:62:bf:d9:7e:35:d3:5e:42:9d:5f:
0f:f0:42:43:4b:33:f1:2d:8b:f8:66:3f:80:6e:fb:
f0:f0:12:fb:39:72:25:40:1d:86:d9:ad:10:d9:8b:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:D3:74:DB:46:C7:EE:47:5C:DB:33:F6:6D:22:D0:76:70:26:AC
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:38:dd:4f:77:0a:1e:38:7e:b7:70:b8:be:96:c0:d3:3e:
02:e0:96:d1:92:84:cf:cb:00:67:22:fc:5b:5d:05:9c:72:7d:
68:18:f6:05:8a:58:74:f8:18:e8:e5:dd:3a:d2:26:7e:26:cc:
2c:2c:48:7f:61:45:bd:46:06:7e:df:49:61:59:5b:31:85:e7:
38:f2:49:02:f5:b4:2b:8a:ef:8b:ee:e3:aa:d2:ee:7f:37:0a:
1a:1c:36:24:da:e2:e9:0a:9b:d8:28:4d:b3:08:82:e1:f2:52:
97:5f:c5:7d:30:f3:96:9e:63:be:e5:51:ab:10:51:a4:11:8a:
33:e3:83:66:3d:b2:c6:6a:b1:b8:6d:a3:27:75:fd:6c:4b:3f:
95:e0:a0:ee:01:e0:b3:9a:74:ab:e7:1f:77:41:a5:7d:ac:77:
fe:fe:57:4d:59:ad:bf:7e:15:f4:16:8d:45:3b:e7:3c:e3:76:
d9:9d:07:b5:cf:a9:fc:3d:23:8e:dc:6f:5c:02:e6:21:d2:25:
3c:5d:7d:13:a0:f2:b8:c1:f0:41:f5:74:b9:8b:8e:c7:93:92:
9f:c0:db:24:f7:25:ba:ce:3a:75:02:19:81:53:eb:0a:a8:25:
64:0b:05:fa:f9:53:5d:28:f8:17:75:15:f1:57:9e:f9:0c:d9:
4a:ca:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:27 2025 by rpki-client