Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: m3bHLsaIjm7IhdaHivI9G/K8pCovajNiTfBgmggekL0=
Subject key identifier: 4E:9F:03:97:F9:8C:4D:25:A7:1B:B4:B5:4B:7B:D2:51:62:B2:97:90
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 0198D404ED32004287D56CBAF793879D21BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:02:29 +0000
Manifest this update: Fri 22 Aug 2025 23:02:29 +0000
Manifest next update: Sat 23 Aug 2025 23:02:29 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: wM3kvocXJadCgirWxIhhnk1G1jKggDOJj9MsoxoXpwU=)
2: ye296n7TFw2U7qCSerBkbo7SsH0.roa (hash: m5pP+tHttyj1Oj+JBIbSiGDkTJLLn21rUnR9Ptw/3e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ed:32:00:42:87:d5:6c:ba:f7:93:87:9d:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Aug 22 23:02:29 2025 GMT
Not After : Aug 23 23:02:29 2025 GMT
Subject: CN=4e9f0397f98c4d25a71bb4b54b7bd25162b29790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:c8:55:98:b8:1d:2e:4a:46:a4:cd:c8:a2:
30:6a:83:1b:6a:a2:48:67:cf:1a:67:71:51:1a:41:
61:9b:a9:9e:62:aa:0a:84:54:06:f0:b8:60:b4:67:
82:11:3f:b9:a3:7e:21:30:93:ab:40:b1:f0:c6:37:
89:31:49:cb:2b:e9:62:62:89:ff:a2:c2:2a:e5:51:
8d:b7:44:34:83:87:5d:0f:c3:43:61:37:81:08:50:
8b:37:62:e8:a8:2f:2b:72:f8:33:49:89:b2:80:e3:
8e:09:de:34:a6:3c:de:05:ef:05:ab:b2:ec:39:cf:
49:ea:f1:78:4e:b2:74:aa:cf:a9:5e:23:76:d3:46:
26:7a:4b:72:cd:a7:01:6e:78:f4:c6:5d:c8:36:3c:
74:16:4d:97:ba:a9:9e:79:ba:aa:20:69:4c:51:58:
3a:a0:df:40:fd:b8:3a:98:b0:59:cf:8e:89:35:46:
76:a7:04:7e:83:39:8c:09:66:02:28:5d:68:3c:76:
9a:5b:67:c1:c7:26:a7:e8:64:38:f1:95:00:e4:2f:
83:9d:73:d7:cb:2f:c5:2a:70:47:2b:3a:9c:ed:8c:
9f:fb:f2:37:22:3e:9a:e3:9f:27:ce:65:6c:0c:e3:
63:b5:6f:fa:7c:e0:3e:cc:70:8a:f4:50:ec:08:27:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:03:97:F9:8C:4D:25:A7:1B:B4:B5:4B:7B:D2:51:62:B2:97:90
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c0:26:88:6a:76:95:ee:10:ed:85:a3:3a:c7:9c:42:3d:50:
fc:0b:f9:3b:9a:52:47:e4:7b:54:e5:40:e0:3b:4f:21:57:d7:
86:ec:7e:cc:65:07:b7:00:bf:cc:d5:31:5e:01:a6:a3:93:8a:
e6:e5:23:56:e4:50:f0:f0:ed:85:9b:73:8f:53:1d:b5:d4:8f:
49:bb:8d:21:24:87:9c:88:36:da:56:d6:85:77:e7:98:db:1a:
87:f5:81:b1:44:06:82:30:c4:87:a3:a8:11:fc:91:56:f0:5d:
c7:52:20:34:72:e5:07:9c:e8:6b:22:5d:c4:c3:b6:f7:b9:c6:
ca:a4:d3:c2:7c:35:00:60:41:10:d7:07:a1:5c:a5:e6:84:8e:
0c:37:b2:14:77:01:8c:03:92:96:e6:bc:f0:2c:30:81:74:78:
2f:67:a8:1a:8a:74:a1:b9:18:16:45:85:90:63:bb:26:1d:7f:
15:26:05:e2:ae:a4:d9:dc:a9:1f:03:6f:67:2d:97:af:8c:8f:
c1:39:25:f9:cb:fe:fe:cb:ce:d8:46:6b:fa:5d:2e:ed:c6:ce:
08:22:d1:56:d5:1c:6b:36:af:71:76:79:0b:f2:12:63:0e:2a:
eb:48:e4:80:6a:44:13:e8:f0:df:74:d2:51:61:23:36:c8:ee:
88:43:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:58 2025 by rpki-client