Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: LCbdxHb3303JG5o8h11iTXw9ViiKvCH2APBF/issqnA=
Subject key identifier: 7D:79:44:78:33:F7:2C:9D:62:71:6B:00:CF:2B:32:BD:AC:CA:24:9F
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0198D6982860055B95A8F860AFC5DE844950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:32 +0000
Manifest this update: Sat 23 Aug 2025 11:02:32 +0000
Manifest next update: Sun 24 Aug 2025 11:02:32 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: 76O4H6VhsMN4l1cHiBKTTqxQ/HpteTqKPaRSjNDFqaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:28:60:05:5b:95:a8:f8:60:af:c5:de:84:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Aug 23 11:02:32 2025 GMT
Not After : Aug 24 11:02:32 2025 GMT
Subject: CN=7d79447833f72c9d62716b00cf2b32bdacca249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:73:68:d7:fe:0e:03:7e:af:b7:93:57:20:
ba:7b:0f:a2:41:34:43:3b:ed:1e:ed:92:18:41:7d:
36:25:a2:28:d2:8d:a5:47:7f:06:c2:d1:85:8d:ee:
2e:43:bf:c2:01:fe:20:ef:59:52:84:fd:0e:1f:5e:
aa:4f:45:24:39:43:70:4c:62:03:55:23:b3:45:1b:
93:d0:73:a2:c1:b6:63:93:72:21:52:03:e2:cb:95:
e7:3f:22:8d:57:96:91:ac:2e:69:6e:1a:a6:b6:08:
06:06:7e:a0:0d:ad:20:a1:ef:dc:ea:6f:bf:dd:a3:
32:49:52:59:c0:be:74:ff:ad:2e:16:8f:23:44:76:
84:6d:7c:11:ae:9d:70:f3:57:9e:e6:e7:ca:2d:64:
e7:19:49:2e:7e:91:5b:a9:5c:27:28:fa:ac:11:b4:
1b:92:44:25:bc:3a:f4:12:94:f1:ac:1c:34:cd:94:
7b:87:6e:a3:41:7e:af:cb:45:59:24:38:8e:e6:0d:
95:55:3e:a6:7c:3f:86:b9:1b:0e:71:0c:f0:71:7b:
18:88:70:8c:1b:89:f9:49:4a:68:14:f0:09:c3:e5:
63:3d:c0:5e:dc:ca:6e:93:88:7a:f0:c0:28:0a:f8:
0e:cb:47:a7:a2:a4:aa:cc:67:d3:6c:5c:93:9e:42:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:44:78:33:F7:2C:9D:62:71:6B:00:CF:2B:32:BD:AC:CA:24:9F
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b3:9b:13:57:e3:63:92:03:5f:ec:cb:99:2d:02:ea:fd:e2:
db:d1:3d:e2:73:bd:ed:ff:72:d3:92:71:88:ba:d1:46:b5:ca:
0f:1b:60:66:39:e0:9c:b0:79:46:b4:b8:91:7e:0d:f3:22:61:
eb:58:36:e2:bb:15:03:d7:25:96:52:d3:69:3c:d5:f7:5a:eb:
08:19:d4:3b:2c:2f:00:4d:de:61:77:e3:ca:f0:84:72:3d:5f:
d4:fd:65:bf:4e:9c:a1:06:ab:13:74:70:bd:0a:a5:39:72:bf:
ba:ea:d8:a5:df:37:02:09:fa:7d:06:a5:84:22:1f:5d:c4:cf:
2e:4b:66:19:4a:5c:3d:54:b1:4c:e0:4b:15:b9:24:a2:26:aa:
2f:07:4b:38:b1:0d:ea:11:2d:d5:ef:8a:7d:2d:cf:a7:eb:08:
c7:56:0d:c1:88:ac:8c:a2:78:e4:54:de:85:da:61:e6:c0:57:
a0:22:32:52:b3:af:e3:65:05:de:b5:d6:cb:64:30:b6:c9:18:
a0:ef:f9:c0:fa:7f:d6:ed:0d:4a:9d:9c:42:1a:25:4d:8f:33:
5c:07:83:ed:fa:93:58:7d:52:07:49:95:8c:07:b4:b7:46:9f:
25:b8:78:07:5b:19:65:85:6d:fb:b4:a1:7a:00:70:25:74:ed:
06:87:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:41 2025 by rpki-client