Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: yeOFKlGtmiNZOkoTIOciT1Pq4DMP6TBOILW5q+LDTcE=
Subject key identifier: 78:0D:5E:AA:6E:F1:46:15:5F:1D:36:7A:9A:B6:AC:15:EE:1B:A1:64
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 0198D4A7BD03FCB28CEE66B9D7F3A457957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: qU50o0aS9SS2GWM5mOIk/RdgBkfnQ/0GLWw3GH90s7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bd:03:fc:b2:8c:ee:66:b9:d7:f3:a4:57:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=780d5eaa6ef146155f1d367a9ab6ac15ee1ba164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:d8:e8:80:33:99:ae:4b:bc:1e:5d:a4:0b:
b9:dd:32:6c:83:a3:74:83:38:64:14:fa:9e:9a:ee:
c5:d6:7e:52:32:6e:2d:76:8f:62:d3:c7:1b:28:87:
ab:60:50:83:65:21:c6:5f:6b:b1:93:9f:8d:c0:f5:
e6:da:7e:46:36:bf:69:da:c0:24:92:12:de:a8:60:
37:ea:05:8b:76:f8:12:ef:4c:81:af:d0:a1:88:0b:
07:15:69:d8:99:90:25:7b:5f:97:7b:ef:58:9d:83:
fb:90:20:c2:2f:f8:21:b6:1f:cb:9a:23:73:61:7a:
59:62:2b:30:8b:2e:13:80:5b:29:5b:41:fb:ec:e2:
c3:a0:51:40:e5:f6:04:2b:74:68:51:bf:79:5e:76:
c5:00:a9:94:2d:d8:88:7f:ce:bf:90:3c:3a:f3:55:
50:8f:8d:4e:b8:ac:96:ee:31:4f:1c:eb:e0:6b:ea:
00:6d:ef:9f:54:4e:cf:bb:af:34:6d:34:55:61:9d:
dc:0f:cf:f7:0d:29:00:b7:ea:2e:34:a6:56:4c:c6:
81:c2:5d:ee:0f:82:c6:4e:84:60:ef:5a:fa:1f:b3:
64:75:2c:2d:26:c7:e4:de:a6:01:92:59:65:21:58:
50:fc:26:63:05:5b:f5:e3:f4:0a:ed:81:78:bd:62:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:5E:AA:6E:F1:46:15:5F:1D:36:7A:9A:B6:AC:15:EE:1B:A1:64
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:27:c2:7b:eb:c4:c2:34:e0:f5:c5:4d:35:10:79:a1:84:
19:5a:4d:94:47:3e:66:47:93:e8:e5:7a:b1:27:18:78:1b:36:
c7:6a:36:38:93:a7:5a:50:64:a3:04:34:ab:37:42:b1:fc:bb:
13:87:51:1e:e1:c9:80:f5:f4:77:f4:86:63:5b:73:bf:74:28:
bd:96:61:07:3a:28:ce:f1:90:ce:0b:76:7b:c3:5f:1d:7b:72:
75:03:6c:ba:57:87:c4:d4:f2:d5:19:4f:62:31:b9:8c:c6:52:
1c:0b:76:47:1b:e5:55:82:62:06:5d:0f:7f:df:e5:9b:70:88:
3d:b9:7d:83:ae:25:11:16:f1:a4:70:f9:1d:07:c5:d8:83:12:
be:30:0a:6c:94:03:33:3a:59:e5:e3:3b:33:63:9a:c3:e4:9b:
78:20:ea:ed:c4:7b:0a:58:2a:43:eb:7f:e4:b6:0c:8f:f4:81:
9c:9d:bb:9d:93:ab:b5:77:6f:b9:93:b9:c5:35:81:73:42:22:
c1:b7:d8:ad:34:17:6b:7b:67:99:42:6f:ce:09:3a:8d:bf:a8:
d2:f0:58:fc:b7:bd:63:a7:e9:03:bf:dd:45:93:93:c0:77:df:
c9:64:3c:77:7f:00:25:8c:18:32:8a:ad:de:04:fb:44:36:09:
12:bc:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:54 2025 by rpki-client