Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: 5brilpYRW8IskNm1MGMvL7aX/ppmGA57Mj1oynmgklc=
Subject key identifier: 1A:9C:47:29:42:5C:B9:8C:D2:0A:4A:F2:04:0C:1D:B3:5F:5E:A7:B4
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 0198D5163379C75CCBD6C75753C906AEBF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0BF2
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: M5K9rb9J2GPqziVMWGspxPGs6x7Y59Mq8DPyfLxSHFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:33:79:c7:5c:cb:d6:c7:57:53:c9:06:ae:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=1a9c4729425cb98cd20a4af2040c1db35f5ea7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:5e:ea:ea:dd:a3:ee:f5:a2:1c:2a:68:98:
9a:44:7e:db:6f:69:2d:c4:ec:48:59:b1:cb:2d:98:
ba:8c:ef:a7:67:f4:cc:86:da:d8:50:1a:5a:03:73:
02:f3:d6:0e:bc:ed:b3:7e:43:e7:a4:19:df:83:62:
91:ff:14:d3:e8:d9:10:5d:5f:7f:cf:78:0d:29:1e:
55:e8:08:bf:e7:30:4d:0b:be:e1:54:4c:3f:51:79:
6f:e0:4a:15:71:f2:30:f1:c7:d0:0d:2d:a1:d7:ae:
8a:68:dd:c1:25:83:8e:d1:a9:28:7b:ef:ae:cf:41:
c8:58:39:64:c7:51:fa:42:f5:f4:76:45:98:9d:5a:
0d:ed:23:7c:32:6c:b2:57:6f:73:f8:7d:cd:a6:d6:
79:26:99:55:85:59:da:dc:03:4a:b1:79:80:f2:3f:
cd:9b:7e:bb:df:01:e4:6f:4d:67:7a:16:79:bb:c4:
dd:e0:3e:6a:07:2a:ea:7f:75:77:bc:43:5c:27:d3:
95:88:fd:9a:38:80:27:05:31:5e:f2:fc:b6:5a:c5:
e4:3b:74:dd:b4:62:e8:da:5e:f6:c6:dd:e6:44:f2:
58:24:14:1a:16:ee:7e:01:3b:92:00:54:67:fb:93:
11:e8:df:97:98:8e:bc:14:6e:a9:69:52:a8:21:43:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:47:29:42:5C:B9:8C:D2:0A:4A:F2:04:0C:1D:B3:5F:5E:A7:B4
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:56:b6:7a:6c:eb:3e:06:a0:9b:87:41:f7:0f:cb:46:1c:bc:
a0:56:b7:ca:d3:30:66:07:f5:71:f9:f2:27:02:f3:34:28:4d:
85:c4:34:ca:c1:87:da:d3:87:b7:ec:5e:d7:84:96:4e:5e:21:
4a:13:ad:39:59:3e:20:34:db:e6:c7:54:e4:0f:1f:5d:fb:12:
99:0c:04:ec:e5:f7:0b:ff:02:d7:8d:58:a5:bc:90:a7:7b:6c:
90:65:9f:8c:aa:85:a4:73:12:0f:9e:00:b4:9c:a6:04:01:d9:
c4:b1:9b:69:ff:44:fa:9e:01:6a:c7:37:c3:29:b5:f8:eb:c8:
16:73:74:23:52:8f:a2:1c:4f:03:f6:8c:6b:ff:05:5d:76:50:
d5:a4:e7:92:bd:a3:ed:ac:5f:86:1b:21:2b:99:68:94:18:13:
61:7c:05:eb:0c:97:b8:9e:b8:ca:32:92:a1:e5:46:13:95:ba:
36:ba:53:9d:33:20:e6:24:f9:f7:b0:03:25:f9:37:14:1b:f6:
e2:32:87:fc:9d:01:f7:2f:6b:5c:d1:cd:c4:b1:f5:80:1b:59:
de:bb:54:8a:84:da:e9:75:79:50:01:5a:d1:69:5a:96:15:be:
c9:17:46:6a:72:6b:85:e3:d8:4b:4c:82:b2:72:43:99:54:95:
84:ce:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:04 2025 by rpki-client