Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: ObXMTUC4uT6xwpQBCKWKqevvM2tjBK6TPcUK2XRK81M=
Subject key identifier: 66:6C:88:36:58:0A:FC:A8:3E:FF:93:85:BE:A5:C1:B5:2A:DD:9B:1C
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 0198D5BBAC3E14A5B334EAB79EA4620D21A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 162E
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: 7tZdF9vxrk9myMILdLsXWPFxJ+NoK2cqaKecx9vaCDc=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ac:3e:14:a5:b3:34:ea:b7:9e:a4:62:0d:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=666c8836580afca83eff9385bea5c1b52add9b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:56:c5:e4:a0:75:60:64:07:bd:be:0d:f1:
45:32:25:92:b0:ae:9c:bb:dc:6b:7d:32:68:00:79:
5f:c0:31:e8:0d:df:2f:82:17:b3:2f:87:e0:0d:f6:
de:a8:65:a9:32:c7:85:2b:19:17:60:94:0e:17:47:
51:2e:e2:54:17:cc:c8:d0:2c:7c:89:60:6e:8f:0c:
f9:bc:b0:f2:5b:80:fc:8a:0b:7d:30:5f:27:07:94:
f1:7a:1c:7f:8e:a9:0d:ee:e0:00:1b:c5:86:21:ed:
63:82:f2:7c:39:0c:86:07:95:81:e5:d4:47:a3:9d:
07:ee:c9:bf:70:dc:28:b2:36:2e:e2:c2:ac:b6:11:
cb:9e:fb:a5:de:48:82:d4:be:c3:f6:81:97:fe:6f:
de:09:17:7c:3e:86:fd:8d:cc:37:ab:1c:df:32:0b:
45:c0:34:35:46:3d:3f:86:31:66:37:73:58:0a:aa:
f4:cd:f7:0f:cf:25:4a:f6:c1:51:61:04:ed:84:62:
19:fb:aa:1b:63:59:36:04:e6:18:61:cc:e7:63:2c:
14:15:42:5e:ad:88:90:bb:34:ff:14:f8:ff:5a:0f:
e4:a9:86:91:ff:8b:ed:69:59:8c:1d:a2:7c:a3:64:
e0:27:c6:8d:76:59:86:ea:1e:d2:9c:8e:3a:f2:ab:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:88:36:58:0A:FC:A8:3E:FF:93:85:BE:A5:C1:B5:2A:DD:9B:1C
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:9b:b4:ba:af:3d:e8:d6:aa:36:68:c7:d8:8e:83:9c:e8:
93:e2:6a:b4:ac:32:d6:67:18:ee:ce:89:1b:77:25:82:e9:70:
93:d1:bf:49:3f:01:96:f5:f0:b9:04:7a:7b:61:64:88:22:91:
f2:81:af:c5:71:39:4f:cc:ce:21:c6:7e:00:42:a7:ea:4a:7f:
16:4d:3e:06:b2:36:6a:ef:ab:cf:f6:08:a5:7d:2b:52:54:a4:
fc:e9:10:9c:7a:a3:42:4d:b9:a3:85:b1:64:fc:d3:ef:da:26:
87:f6:74:9a:26:f3:03:fa:be:04:75:55:5f:5d:d2:ae:29:a8:
2b:68:b3:79:a2:ae:b1:3b:39:db:33:6c:0a:24:71:40:02:08:
3f:11:c7:f8:0f:2f:aa:db:7b:f2:30:ef:49:cc:13:b8:ac:40:
4f:5a:70:5b:46:b3:5a:58:63:7b:01:5c:77:3c:d4:74:b7:21:
38:12:66:e9:39:61:74:fc:12:55:bf:03:5b:5a:df:51:33:08:
74:9e:a4:57:b7:55:70:2b:9e:97:30:06:54:7b:af:64:2a:f8:
a2:38:98:66:6c:1a:bf:c0:ae:e7:81:f2:75:b8:bc:03:51:19:
97:ce:5d:3f:a1:8c:60:91:29:63:b2:4b:82:8d:a9:6a:88:ef:
c6:16:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:41 2025 by rpki-client