Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: YxBSahgC/quk2GVfwnVKbRgd9Vg8hQmoPB8UEqwsHhM=
Subject key identifier: D9:DE:2E:65:C5:34:7D:C2:8C:27:B1:1A:10:39:20:14:F2:A6:59:1A
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0198D583C4EAF6A021D1992ECDC5974C02DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: uufD28zk8c9n5K1f1rFyTwt0yUCcZNDTt0i5Gum14fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c4:ea:f6:a0:21:d1:99:2e:cd:c5:97:4c:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=d9de2e65c5347dc28c27b11a10392014f2a6591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:e5:89:81:56:4d:99:c3:50:a3:af:ba:a9:
54:ef:1f:f4:9a:6c:4e:4b:1c:d5:3c:6e:4b:77:ce:
43:fb:b8:c9:b7:d7:36:e6:88:dd:1a:62:66:c7:e3:
d2:4b:fb:e1:e3:4e:2b:3a:c2:3f:9d:e3:61:fb:e4:
b0:f5:78:0c:22:77:24:68:88:de:a0:38:f1:b1:5e:
48:89:3e:2a:46:2a:da:a6:27:c4:ee:23:0e:07:8a:
b1:92:11:a8:3e:3c:c2:38:ad:3c:55:ae:dd:c8:4e:
f4:de:30:b3:11:4c:05:1a:f5:2a:9f:c5:61:f7:91:
12:c6:34:81:66:b0:26:c6:96:68:8d:28:04:67:7b:
c3:c3:04:ef:d6:63:cb:35:a9:02:e6:17:a6:ab:74:
14:06:31:eb:a8:56:79:40:41:cc:86:52:c0:f7:20:
6a:85:da:1e:3c:7e:d7:07:35:7e:84:90:53:67:e0:
78:f6:f7:e4:65:f0:f0:01:22:9e:5b:ad:33:13:23:
ce:82:fe:a0:24:c2:40:94:79:7f:a6:ce:bd:43:77:
9d:44:36:93:b6:7b:88:b7:e9:18:a5:07:38:b4:99:
b3:e0:2b:9a:20:83:f6:6b:9e:a8:33:b8:3c:b0:4d:
aa:3d:07:63:a6:f9:4e:b9:a0:f4:3f:b9:fb:c0:7b:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:2E:65:C5:34:7D:C2:8C:27:B1:1A:10:39:20:14:F2:A6:59:1A
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:00:33:bd:40:b3:99:4c:e6:ee:04:f0:41:e5:ab:b6:83:
55:c5:a5:10:56:84:b1:e3:fa:07:25:2f:ad:3a:2e:ef:41:b5:
76:18:03:d9:62:34:0b:c9:69:b1:54:f1:79:10:e4:20:81:48:
86:7b:a4:20:a6:87:dd:4c:41:ed:32:4e:e1:e9:7b:14:53:fc:
62:16:36:bb:80:23:98:07:9c:c1:16:43:e5:20:59:cb:52:a8:
9c:5e:c2:77:71:80:cf:04:43:d7:9e:95:4e:f2:37:02:4a:ef:
19:a9:f8:3e:37:76:25:cf:0a:54:4e:6b:5e:6d:f0:4e:42:5a:
22:c2:ca:8f:46:97:39:9f:31:11:1b:4d:b9:91:52:3f:bf:c2:
81:08:de:07:c4:2a:14:bf:c6:1a:07:c9:82:ec:88:80:50:2a:
99:1d:36:6e:41:9f:0e:f9:9f:84:02:2e:e4:72:a4:36:d3:b0:
6b:72:e2:e8:74:45:a8:f1:5a:70:19:1b:25:cf:e2:03:22:a0:
a6:57:fc:1d:f8:57:68:93:bf:b9:5f:33:dc:73:62:b5:c7:01:
48:b9:6e:8c:47:ce:a2:79:ae:c5:9f:a4:4f:ec:ac:3b:03:59:
84:63:25:2f:ce:5d:a9:97:e4:69:b4:20:00:d4:d6:b2:4d:72:
fd:83:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:19 2025 by rpki-client