Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: OiPJDlZXS+nokoJlF0YaR6vOArqG71Ooo+oCQy0XDxc=
Subject key identifier: 16:6A:42:F8:FB:81:A0:2C:CC:53:7D:34:F6:4D:55:0C:D6:EB:E0:C4
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0198D850C3992AA4B32F5A8210DC6E9528B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:03:48 +0000
Manifest this update: Sat 23 Aug 2025 19:03:48 +0000
Manifest next update: Sun 24 Aug 2025 19:03:48 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: o0XykAcogvjw+OhKBcHQ3LBzILtc3aBFDqcXEIeb/oA=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:c3:99:2a:a4:b3:2f:5a:82:10:dc:6e:95:28:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Aug 23 19:03:48 2025 GMT
Not After : Aug 24 19:03:48 2025 GMT
Subject: CN=166a42f8fb81a02ccc537d34f64d550cd6ebe0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:9a:93:1e:31:ad:cf:b8:fb:15:5f:5e:c2:
d8:e7:d8:46:5b:13:60:37:2c:01:68:75:18:81:46:
7a:7b:25:6c:4f:d9:bb:67:3e:fc:2e:97:44:bb:49:
a2:a4:58:b2:e9:b5:79:69:64:25:57:19:d3:51:f8:
cf:81:5f:5e:78:6b:ff:52:22:c9:af:b3:b3:a2:d2:
36:f6:a9:57:34:be:76:c2:08:ed:63:46:74:a7:8b:
d2:64:4c:48:71:82:e1:f1:3c:56:51:ce:48:c5:df:
a4:93:f5:04:2d:d3:d9:56:e5:8b:89:c5:33:66:9a:
cc:0b:e1:ef:92:38:86:f4:96:63:28:45:e1:af:7c:
52:17:76:65:3a:d1:24:ae:3b:14:d1:d8:a8:69:de:
ca:c9:a9:6b:34:4b:fa:d8:95:ff:64:f8:66:da:bf:
a3:61:94:46:80:e8:1c:4a:2e:68:aa:ac:41:56:55:
8f:29:95:26:ba:f7:3e:2e:77:6a:9f:af:2d:78:12:
bd:63:5c:3c:0c:67:46:6b:77:02:a5:35:08:3b:16:
86:f0:85:22:59:80:c8:ff:26:e4:36:98:6d:06:f7:
78:7e:c8:26:cc:6b:61:69:a8:70:31:d9:8c:4a:95:
c8:06:23:8a:ef:3c:e5:ec:25:4c:d6:4d:d1:e7:81:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:42:F8:FB:81:A0:2C:CC:53:7D:34:F6:4D:55:0C:D6:EB:E0:C4
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:cd:10:36:2c:9f:27:98:d4:87:69:70:3f:af:26:0a:b2:
34:72:72:64:77:2b:94:9d:cf:cd:a2:7d:99:8a:d1:7b:1e:7e:
2f:c2:13:de:e7:e1:19:3d:7f:50:be:72:57:5c:e8:49:68:a8:
f2:83:48:e5:bf:6d:84:1d:fe:09:8b:7d:2d:17:e2:64:c1:48:
df:fa:de:03:7e:6e:9a:84:d2:20:52:f3:1d:ec:07:71:9f:9a:
a9:f4:02:ad:8e:6b:e6:ae:8c:2d:ad:a7:26:e5:5c:d5:51:f4:
53:eb:69:ce:de:72:e7:52:a7:23:1d:74:4a:a4:df:6c:1a:a8:
19:67:03:06:59:38:8c:ad:85:f4:1f:82:31:99:05:54:b7:fc:
9a:ec:3a:91:69:0e:ad:bc:95:19:26:96:d2:b5:44:98:c2:b0:
47:f4:12:26:68:fe:cf:2a:b5:1a:d9:e8:55:25:89:dc:64:50:
ba:0f:07:1c:85:d3:19:bd:7a:ed:58:56:2e:ce:21:50:50:87:
7e:bb:91:13:92:2b:2a:33:e9:19:df:a8:99:8b:94:f9:6c:31:
12:7e:cb:27:b8:b8:9f:6e:20:67:e1:72:ba:12:a7:b4:1b:3a:
a7:01:cc:c2:8f:59:bb:c6:cf:66:f6:b2:84:88:9e:29:98:2f:
e4:1c:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:36 2025 by rpki-client