Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: bJgyyJGlI4h0dm/VldOI/0ZzV0RS90QGfrPPnYFZUUQ=
Subject key identifier: A1:D1:3D:C4:81:3E:46:FE:10:9D:F3:3B:A0:40:D6:CF:40:D4:68:A3
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 0198D54E664E4479BAEA0F26DE0853166E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Myi14uku8rdUTH5VYtFL4uYOcwuvAMC4iP/JLyydn5E=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:66:4e:44:79:ba:ea:0f:26:de:08:53:16:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=a1d13dc4813e46fe109df33ba040d6cf40d468a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:e9:41:cf:84:93:ad:60:4a:02:07:9d:dd:
5e:fc:70:4d:86:08:18:0e:b4:39:e5:57:6b:e9:ef:
37:0e:37:a2:2a:4e:a7:a8:c0:fb:79:bc:82:18:48:
5d:16:e8:6a:dd:9d:ad:60:d1:e4:c7:dc:d1:4f:d1:
92:ea:41:14:3a:3a:c9:37:15:16:b2:e3:2b:d2:7d:
92:70:27:13:a4:27:0d:66:dc:87:18:62:3e:be:5a:
fc:05:3f:f4:9a:28:22:61:a4:7b:2d:21:99:97:82:
07:f5:73:04:47:fb:c1:f8:d9:1d:f0:a5:07:a8:8a:
51:42:7b:b3:cc:32:c2:ea:37:e9:3d:46:c2:e8:fd:
12:be:e8:a3:86:39:80:ee:c3:db:d4:0e:64:d4:22:
78:d8:1e:d3:7e:03:49:fd:04:04:99:89:14:88:75:
be:3d:22:b2:4e:d8:76:df:d8:a0:62:df:ff:e7:5b:
42:59:d6:ca:fe:e0:41:2c:8c:8f:b4:34:69:f5:97:
ab:6a:eb:05:e9:a4:21:8f:0e:20:d3:71:19:3e:9b:
90:9b:67:78:aa:2c:ac:0b:db:89:62:0e:78:7a:90:
b0:85:c8:70:72:cf:2b:c7:f2:71:4f:7a:ad:a2:2d:
4f:3c:6e:8f:f4:b5:c2:f8:0a:36:6a:1e:2d:9b:be:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:3D:C4:81:3E:46:FE:10:9D:F3:3B:A0:40:D6:CF:40:D4:68:A3
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:1e:cf:fc:1d:09:e7:54:8f:11:3b:1f:83:86:f3:cc:24:
e9:94:23:36:74:80:92:9c:6a:29:3c:ac:9e:5b:12:ca:59:72:
56:46:1e:ec:d6:67:de:f0:1c:38:21:66:ce:46:6f:36:22:8d:
1b:a7:2f:2d:ae:28:47:f1:38:47:a1:cc:6d:c0:b7:92:3b:09:
75:54:6d:7e:30:43:88:e3:4e:a4:11:7e:ae:87:89:1d:16:80:
d8:b3:01:34:d7:46:ea:0f:35:96:97:b3:36:80:8d:83:2b:b6:
8c:6d:bc:4a:66:a1:41:01:7d:df:02:37:d1:81:4d:c5:78:97:
5a:85:34:38:35:02:9d:37:8c:e7:59:a6:a8:5a:9a:07:78:8f:
f2:f7:0c:6e:7e:ea:c3:16:b9:3c:00:13:5d:30:68:9c:ef:1f:
b5:b4:21:65:20:43:e6:dd:99:6f:e6:dd:09:2c:7a:17:9d:f6:
fc:3d:a8:e0:75:be:5e:59:bc:db:f3:21:aa:f9:a0:4c:67:37:
79:cc:62:4a:97:2f:d1:63:3d:98:62:45:bc:21:2d:ce:c4:65:
36:f4:b0:9b:d2:69:e3:cc:1f:3b:e2:98:81:52:b9:fc:f0:92:
05:75:80:f7:cb:6a:52:63:11:00:1d:ec:3a:d8:0d:cf:51:0e:
29:6c:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:17 2025 by rpki-client