Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 8rPhLHLwAflAfAH3363KO3wDFFvT1M4/IY3txprcsUI=
Subject key identifier: DE:07:AC:82:E4:03:2D:99:67:24:83:70:74:03:6A:33:80:2B:5B:C2
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 0198D58352693064431E00D6DB80338C9DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: 6xCa/d1Qs1GDz3hF/dzS8HI0umPV7JLddur26cHiuso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:52:69:30:64:43:1e:00:d6:db:80:33:8c:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=de07ac82e4032d996724837074036a33802b5bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:20:bc:d2:25:2b:de:0c:be:43:c6:1b:b0:
98:e0:e0:a8:b3:6b:31:8b:b0:37:23:15:b1:63:fd:
9d:dc:f6:f0:c7:82:4b:19:74:03:b5:b2:71:f3:ed:
cd:05:88:b6:0c:c3:7b:e8:fd:14:c8:87:d7:6d:ac:
fd:37:29:96:d4:48:8f:8b:fa:5e:cc:1d:ed:13:bc:
a4:c7:92:57:dd:b2:58:9d:21:f3:bd:fb:90:e4:b2:
a3:7b:49:ab:ee:f2:6b:e2:0d:a3:f7:6c:aa:3c:4a:
85:f4:f9:72:9c:1f:be:2f:96:49:63:4d:47:47:08:
86:2b:65:39:6a:58:11:32:d4:0c:c1:66:25:61:44:
1c:4d:e7:0a:26:44:8f:c8:a1:5d:26:f9:a1:4d:2f:
76:94:56:e5:ca:0c:7c:2b:f7:1f:24:01:6f:68:03:
f9:a1:0b:70:cd:cf:4d:f5:fa:b6:a3:6d:1d:71:84:
11:8f:32:d0:ff:68:29:b1:4b:cc:78:63:92:07:5f:
e0:42:a6:8a:06:2c:32:51:7f:4a:6c:84:3d:d8:de:
10:fa:2e:d5:f2:62:bd:35:b8:d4:b7:50:be:65:06:
9f:0a:4d:ff:6a:26:e9:c3:37:e0:49:9b:61:46:75:
c6:bb:1c:45:4e:d4:c1:72:95:aa:fc:66:1a:95:b6:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:AC:82:E4:03:2D:99:67:24:83:70:74:03:6A:33:80:2B:5B:C2
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:7c:21:e5:c6:d1:24:6b:1c:e6:fb:0b:50:db:73:3d:12:
a9:9b:49:ac:ac:82:02:db:87:1f:a7:4e:a8:70:91:b3:70:bc:
eb:6a:c7:d7:2c:45:7f:69:2a:86:fb:12:aa:a4:0e:51:d3:4a:
8a:ce:06:55:b8:0c:fa:1a:ee:42:5a:f8:16:e4:ea:c3:a4:34:
b4:a4:56:28:e7:92:bd:98:17:cd:42:d3:0e:2b:3e:99:a7:2d:
ce:b7:88:5e:e8:e5:b5:d4:af:8c:1a:fd:0b:05:3d:f5:e5:dc:
fb:e6:3b:ab:e1:28:bc:ac:c0:2d:b3:5c:23:9a:46:80:28:31:
13:9f:60:ec:eb:69:03:17:19:33:4a:51:3b:20:5e:2a:c3:ed:
0e:88:4f:92:c9:a0:ff:34:26:86:b8:89:b6:8d:41:e6:f9:48:
d8:08:d3:c1:58:d5:1f:1b:95:6b:24:8c:ae:d7:a4:e3:36:bb:
a8:3b:65:2f:79:c8:fa:e7:cd:9a:eb:a8:07:8b:c4:c3:38:9f:
fa:41:75:2d:f9:3b:2a:b2:32:a5:31:73:86:25:a3:81:20:ac:
e2:09:86:4a:ab:6b:7a:c0:6b:65:72:72:25:f2:0e:47:28:a5:
cf:20:bf:c6:a7:dd:bd:5f:01:66:fa:54:fd:a3:fe:86:88:38:
c2:e5:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:13 2025 by rpki-client