Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: gg0g+fvWDwNr9NQivQT4Vppgkxiao8Qkk0OjvdWx5nU=
Subject key identifier: 29:5E:33:6E:F3:D5:8E:6F:A6:CC:76:77:24:0E:D5:E2:68:9D:A5:40
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 0198D5BC0B13FBE74DFECDD4EF75A7A71033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: 0UUz+Uc/GYYBiTLvK29htkPu2PH4JU7hk9AZM8hcQAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0b:13:fb:e7:4d:fe:cd:d4:ef:75:a7:a7:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=295e336ef3d58e6fa6cc7677240ed5e2689da540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:bd:1e:6d:73:94:c7:6b:8d:fa:ab:73:01:
29:20:8c:d7:01:ee:cf:6d:5b:2b:b1:96:b3:29:dc:
94:04:71:33:33:f2:7a:b5:4b:7f:d1:87:a7:39:38:
94:24:f7:fb:f4:37:e3:d8:60:dc:c1:12:c7:69:ae:
de:be:7e:ca:15:a0:db:c3:1d:93:fa:0f:dc:b8:df:
74:05:02:c1:c0:74:55:f2:2c:87:ff:37:49:08:2f:
70:94:1d:91:5f:b4:c2:6e:16:2b:c9:81:ed:31:31:
8c:d6:83:d5:46:5c:66:4e:68:1c:ef:b0:fd:26:69:
c2:69:01:db:ec:ae:fb:bd:d6:3d:1d:62:84:b8:62:
d8:6c:36:fa:d4:48:2f:87:82:7c:b0:84:48:61:c5:
0c:a1:08:68:fd:6a:19:6d:2b:ea:dc:7a:c7:79:02:
04:c3:54:f5:35:8d:93:20:f4:b4:5b:62:bc:00:4c:
d3:b7:3e:2f:c8:26:9d:66:bc:03:a5:03:c8:5b:a0:
97:65:bc:85:0c:cd:5e:a7:67:e5:14:7c:98:cd:b2:
66:48:0a:3e:9f:c6:0e:5e:03:85:23:f2:a3:ba:21:
1c:66:df:c8:4a:0c:72:ae:27:dc:b0:54:9d:d8:9d:
61:fd:fe:35:64:bc:41:c9:14:b2:8f:cc:25:e3:fd:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:33:6E:F3:D5:8E:6F:A6:CC:76:77:24:0E:D5:E2:68:9D:A5:40
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:21:51:f9:0b:15:5a:b1:35:b6:c0:4a:77:a3:d0:60:08:
02:f1:60:66:e7:ee:39:04:95:a0:d6:41:cf:0a:63:8e:0b:cf:
e0:51:b9:fc:3e:37:f5:c8:d5:e7:44:ab:0c:d5:e5:47:d1:9c:
bf:aa:ed:7e:da:12:de:5c:b5:e6:45:14:58:12:c1:ef:cd:67:
50:b0:b9:3f:b6:5c:fa:23:72:c8:64:75:65:80:d0:d8:0b:1b:
dc:46:92:86:6a:f2:c8:52:e6:21:b7:b4:f9:21:08:2d:84:dc:
db:95:07:00:7a:dd:e6:99:b1:f3:ad:9e:c5:87:d8:47:b1:c8:
64:d9:60:be:ba:57:a0:b7:62:33:18:84:8e:66:ff:ec:61:a8:
08:61:a9:ed:26:c0:70:1a:ae:1b:56:b0:74:21:d5:66:e5:c6:
38:12:f6:0c:ee:eb:c6:4d:0f:28:ee:98:7f:f0:df:0d:fa:bb:
8d:48:36:68:6c:00:41:b1:2a:a3:e5:1a:71:d8:bf:43:12:08:
04:ac:e8:96:75:37:84:8d:0a:7c:f6:66:f1:5f:d5:2e:a0:3f:
48:70:16:bd:f7:74:3f:92:7a:3a:f5:3b:3e:c6:80:5b:6d:00:
75:8b:f4:20:65:a6:32:b9:83:54:48:f0:5a:73:00:9a:50:56:
2d:e9:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:15 2025 by rpki-client