Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: eBfsUREw5kkQcAZ8PYa4jftm2GZ79xz8D+qTB0mYBOc=
Subject key identifier: 3B:2E:06:E1:12:7B:CE:CC:77:EB:E4:35:EE:9B:2A:FC:B7:1E:3D:86
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 0198D705CD0CFA28777978E9042DD5545CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 13:02:18 +0000
Manifest this update: Sat 23 Aug 2025 13:02:18 +0000
Manifest next update: Sun 24 Aug 2025 13:02:18 +0000
Files and hashes: 1: CXkACV-63YQsGoLAT_fjFmpIWrY.roa (hash: VrWjblsIWiGRBo5IbexwcD3xb4sOkqQVyxbnH8/frQ4=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: FxYKPHJToIz0YfrcXkaDtlFxbbDVMs/tNwMf9debznE=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cd:0c:fa:28:77:79:78:e9:04:2d:d5:54:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Aug 23 13:02:18 2025 GMT
Not After : Aug 24 13:02:18 2025 GMT
Subject: CN=3b2e06e1127bcecc77ebe435ee9b2afcb71e3d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:b5:6d:05:cf:e9:f2:c9:ad:4b:b6:19:b7:
ec:bb:68:35:22:bd:d6:3b:3d:0d:3f:95:cf:fd:9b:
22:3f:b2:54:0a:de:d7:26:34:6e:79:ea:c0:79:b7:
49:51:54:54:cd:53:bc:1a:54:ad:65:57:20:58:10:
10:94:73:40:90:c5:67:fa:39:ba:78:d0:4d:cb:8b:
4b:d7:80:fa:eb:d1:85:0a:cf:d9:22:ab:b0:a0:55:
09:ee:3a:12:4a:4d:41:56:5b:9f:5c:81:0f:aa:b4:
db:9c:a6:a7:34:1d:67:b3:c2:e2:7e:42:bb:aa:ba:
f3:77:fa:20:9f:89:63:2a:8e:ac:cf:5a:60:ae:db:
74:cf:4f:e0:a9:6a:d5:82:40:91:bb:5e:7f:33:b5:
d7:40:53:db:12:35:58:fb:bd:78:d2:34:4e:8f:6a:
58:9d:d2:0e:36:cd:10:a2:12:35:1b:38:da:53:8c:
38:04:7f:d3:15:ad:e1:6a:fd:8f:4d:6a:c1:57:29:
11:a6:92:a7:38:d1:2e:25:82:ba:45:c6:13:7f:e8:
38:58:55:9b:7f:f8:0c:2a:12:96:3f:c5:82:2c:ed:
1b:8f:f6:05:0e:f6:59:9b:7a:65:cb:3e:13:f1:9f:
4c:c4:37:6a:15:e7:bd:06:b5:08:3c:2e:ed:d4:65:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:06:E1:12:7B:CE:CC:77:EB:E4:35:EE:9B:2A:FC:B7:1E:3D:86
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:88:53:7e:d5:48:23:23:84:42:71:9a:e5:de:d6:a4:c6:
14:c6:ff:0c:7e:7d:ea:f3:8e:36:31:a2:9d:c7:ca:13:8f:a9:
fd:4c:31:66:89:68:fa:da:1d:15:70:f2:39:5e:b9:d5:e0:1c:
67:5c:08:ad:d5:5c:5e:c4:99:cb:06:9e:ee:07:e0:dd:51:03:
dd:2d:b8:35:f7:58:2c:4b:b2:2b:66:75:c4:2d:eb:d8:46:fc:
2d:30:cc:54:62:d3:c5:57:78:fe:09:94:31:14:f0:c0:5c:a3:
11:9a:54:e8:01:e7:45:4a:93:e9:e0:d3:1a:9d:19:32:58:30:
7d:51:df:3b:9b:86:4e:1f:fa:19:4b:99:60:9f:23:ee:26:3e:
73:04:63:c3:c1:86:bf:d3:77:c6:21:f5:cc:df:9e:95:b7:93:
18:30:76:28:e1:47:2b:21:ca:ee:d3:7c:45:be:b2:a8:dc:18:
49:9c:88:7f:97:4d:f6:31:9e:80:49:3b:55:a0:1a:d5:79:12:
84:fa:d7:f3:40:06:48:6c:39:4b:7a:ac:b5:a0:fc:5c:61:18:
c4:28:27:75:f1:b9:bc:3d:93:d8:14:d3:e1:a2:d8:41:4f:a8:
f1:e8:c5:dc:d6:82:1b:91:4e:93:3d:b2:4d:60:93:af:10:d6:
e5:7c:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:33 2025 by rpki-client