Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: Vgzp3J9r8/L258MBqOlr+1SxAdX7x0DKUKVVeZ66kto=
Subject key identifier: 68:6B:C4:D4:74:D9:48:9E:CF:66:C9:1D:96:72:19:EA:65:2B:FF:8F
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 0198D54E6C6F118EAEB255F3DAD8E093CE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: /9qMDU5A2PugMRJTWLasuJBgCRrdHatXPZmpUZxsbJ4=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:6f:11:8e:ae:b2:55:f3:da:d8:e0:93:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=686bc4d474d9489ecf66c91d967219ea652bff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:89:c8:8a:2b:7a:05:c1:be:d9:ac:f2:42:
b0:2d:f8:f9:88:8d:d4:4d:b0:9e:e6:39:97:0d:f6:
04:34:a1:aa:17:31:04:f7:fe:65:68:a9:d3:26:40:
8f:b3:28:54:58:26:02:4c:fc:19:8b:ab:d2:04:02:
d7:e9:7f:f9:fb:27:29:ac:ab:47:b9:01:32:bc:31:
2b:3b:a6:fd:a1:dd:a6:32:81:19:96:2b:3e:cb:45:
07:d7:1f:e7:ac:db:e9:30:ff:f6:b7:0d:e9:79:7c:
d5:d6:f2:1e:2d:21:12:dc:96:33:f3:23:ed:2a:cf:
c9:be:67:82:ec:17:54:c9:5c:b7:cd:0a:dc:b4:6c:
17:66:8e:83:6d:d8:24:83:31:42:e0:3a:bc:02:a5:
57:c5:3a:91:a8:00:e8:f4:66:63:2b:89:06:9d:61:
9f:48:48:fa:dd:06:41:82:51:2c:c1:ad:b2:ba:b8:
0e:dc:28:58:fd:89:3b:7f:0e:dc:c0:eb:d2:03:63:
62:fb:ea:82:d5:92:39:f9:b5:c2:d8:30:d8:d1:f4:
d6:8d:9f:91:9f:c2:aa:6f:9c:0a:cf:9d:f4:0e:9e:
d6:45:60:62:01:fc:d7:ab:3f:c1:9e:5a:bf:55:11:
29:5d:fb:9e:19:fd:2e:ad:ea:66:46:bb:27:3e:8b:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:C4:D4:74:D9:48:9E:CF:66:C9:1D:96:72:19:EA:65:2B:FF:8F
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4a:23:86:fc:db:ba:59:bd:67:09:1d:44:13:85:35:d2:62:
d5:92:34:0b:fe:28:7f:b6:95:31:a2:69:a6:cf:d3:88:dc:31:
75:b4:23:7d:1f:40:fc:8d:db:4a:77:ec:5e:30:83:31:b6:d9:
1c:65:ba:ec:47:9d:33:58:52:b2:df:71:4d:ee:d6:ea:31:56:
7b:e7:b0:69:32:7a:a2:84:a5:3e:17:7a:57:64:a9:90:80:06:
da:33:78:9c:4f:9e:a0:a9:16:3c:f1:f3:81:9c:9e:e7:35:a0:
6e:1d:56:1b:82:f2:9b:30:99:04:3d:9d:82:d5:c3:79:25:46:
8c:81:93:be:b4:86:e9:49:de:51:5f:b4:78:2d:8f:a8:7c:ce:
7a:60:81:fb:a8:03:b1:33:11:ae:4c:1e:8a:d2:aa:32:38:ef:
e8:59:5c:99:29:0a:ee:92:09:48:eb:d0:9f:3b:7a:f4:3e:28:
8a:b8:b0:e3:ea:b6:d6:63:50:f5:65:04:86:68:d8:7d:78:e4:
a4:0a:42:01:15:a5:20:95:87:7e:ce:0a:a4:0d:a7:aa:94:fd:
c8:06:df:37:05:4e:be:10:f0:e8:c6:2e:8c:4f:3d:4b:11:72:
d3:87:a1:2e:a8:d6:cb:8c:ad:fc:03:a0:24:25:3a:ef:87:c3:
a5:3c:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client