Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: W+szMuyjzYmCPeW5Pmk3L6nWDSrMpAfdnh4hnz4tuow=
Subject key identifier: D5:BE:99:AC:6C:2E:6D:34:35:AF:EA:7E:85:92:61:89:65:BB:E8:58
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 0198D66100257D965C3D5384130C8F3CDFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: 88Z3Q+GinoYhN/pY6FC38LnLCnuv17uD7AzYtsbX9hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:00:25:7d:96:5c:3d:53:84:13:0c:8f:3c:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=d5be99ac6c2e6d3435afea7e8592618965bbe858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:94:d9:26:70:0f:95:19:7d:ad:b1:7a:ee:
c9:17:3c:05:e5:27:54:ae:c9:75:93:f5:08:4d:11:
92:97:29:7a:1f:b1:45:fc:1e:4c:46:d9:55:4b:13:
69:ae:6d:d2:7a:53:08:e3:fc:4c:4a:e1:88:4f:9b:
00:54:9e:6a:de:e8:b7:df:78:97:fe:7e:b9:91:20:
3f:06:e9:43:10:49:ef:49:4d:2d:f3:1d:61:55:eb:
09:86:f7:7c:df:33:47:6d:a2:fa:80:80:dd:7c:8e:
14:d9:26:43:70:88:bf:50:de:c4:53:1b:f3:ae:9d:
6c:50:d2:20:f9:fc:d2:0a:e5:ae:47:98:7e:d3:95:
52:7b:ab:a6:67:26:af:60:f0:64:4e:7e:b5:02:7a:
cd:14:d9:b7:7e:7f:8b:50:52:50:31:46:bf:cb:81:
12:1d:22:01:42:b6:4e:1f:2e:c7:ab:1f:67:c7:be:
51:79:b9:4b:bd:cb:dd:e6:5b:fd:9d:fd:14:7a:c1:
ef:d8:3f:31:6c:9b:ef:64:27:63:35:90:a7:7c:d2:
03:14:a2:46:c6:05:42:2d:7c:82:61:60:68:f7:6d:
e4:8e:42:7f:05:f4:5e:37:1f:e5:29:d8:5b:4e:8c:
e8:77:60:cd:c9:37:24:15:fe:a7:09:a2:c1:4f:76:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:99:AC:6C:2E:6D:34:35:AF:EA:7E:85:92:61:89:65:BB:E8:58
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3b:a2:73:4d:04:fb:91:72:cf:3f:0c:3d:7d:ec:4e:0a:53:
44:4e:48:7a:df:5c:a9:e9:64:64:f3:e3:30:df:ae:a4:f4:a3:
14:fd:14:d6:b0:21:6e:bd:d9:b9:e7:c5:d0:11:d0:5e:87:ed:
d1:d5:df:b0:69:43:5d:cd:2b:b9:ad:e2:9f:8e:a8:f0:29:60:
d7:d4:43:03:f8:4b:eb:d1:71:97:21:59:e8:1e:6e:13:5b:6a:
08:e1:ad:13:e5:34:ea:a3:d8:8b:79:b9:84:6c:7c:d7:73:0e:
bb:0f:43:35:43:d1:cc:71:cf:ad:72:96:4d:78:14:dc:9c:3d:
44:ad:3f:79:f2:bd:02:64:c1:9d:a2:eb:e1:8f:f8:94:16:58:
42:4d:73:0e:9b:f9:43:d8:d4:9d:33:1d:53:45:73:73:53:63:
cd:d1:0b:0b:6f:e7:a9:a0:2b:03:e2:4b:fc:84:22:e2:db:16:
fd:8e:d4:f0:77:3a:6e:1a:1a:da:75:a2:d9:f8:87:c7:98:48:
5b:8a:2b:d5:7b:a2:23:48:3c:c6:23:62:c6:e3:e7:45:27:77:
42:05:cd:9f:47:3a:34:42:b9:0c:8f:ec:5e:aa:e1:23:4a:a0:
91:28:3d:b9:2e:96:41:69:41:1d:24:7b:fe:a4:e7:da:06:89:
72:e7:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:48 2025 by rpki-client