Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: 6BDE4QuKuR+1dyuswtEuP+Y1UBybdmO6gT4PAahzrxY=
Subject key identifier: 5C:53:D0:94:97:6B:EA:B9:B7:3E:94:DD:8C:AA:E2:C6:73:3B:9C:D7
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0198D5BB8BFE8CEBF1C7F76375152D323990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: eQwZV+vG5B97f8g7h9XkE3aenYIOLSz8ZDtr2UVewSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8b:fe:8c:eb:f1:c7:f7:63:75:15:2d:32:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=5c53d094976beab9b73e94dd8caae2c6733b9cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:d8:3a:c4:e9:b8:45:2e:b7:76:f2:24:b3:
43:4c:ef:6f:bd:38:15:dc:97:86:d9:df:6c:10:e7:
0f:04:dd:74:10:ba:37:04:c0:c8:8d:69:4c:65:2b:
fb:ed:49:ba:25:25:52:cc:d3:a8:94:aa:ff:be:f5:
66:b6:1e:a4:26:b6:7e:59:ec:03:f1:fd:6b:ff:89:
ac:4b:75:d5:bf:56:d0:3f:58:62:b9:76:7a:10:99:
d1:f4:a1:4d:f9:ce:c3:42:ed:15:2b:23:2e:e0:c0:
bc:29:c6:6c:a1:f1:db:ad:e2:77:e0:35:74:9e:92:
dc:2e:6f:c5:a3:ec:45:16:75:8e:e0:15:6a:75:67:
61:d9:87:5b:ca:b5:cd:bb:37:cb:e8:e4:b7:87:1c:
7c:85:6e:d4:36:33:81:5e:e4:f4:d4:14:31:e0:31:
fd:69:23:07:49:76:ba:55:cb:e5:9b:db:04:b2:15:
22:26:2d:fa:fc:64:66:1f:d9:88:6c:96:50:16:6f:
26:66:09:aa:c5:c8:df:9c:b7:94:e8:51:c0:b4:4c:
60:ba:91:9a:c1:9f:8e:7f:1f:d0:a5:77:0c:49:cf:
62:d6:a1:1b:9a:c7:ef:86:f0:2c:c3:4a:6d:49:9c:
da:e6:17:2b:a8:f9:96:50:d7:c3:e3:25:c9:88:d6:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:D0:94:97:6B:EA:B9:B7:3E:94:DD:8C:AA:E2:C6:73:3B:9C:D7
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:52:8c:72:76:38:df:49:c8:96:ef:d0:54:0e:8d:33:54:01:
d3:f4:cc:07:fa:aa:48:e5:55:bc:cf:e6:77:2c:1d:3c:86:9c:
03:5f:d5:0f:ef:f2:85:1e:12:e1:64:c9:4d:b6:80:99:a2:2f:
79:d1:45:45:27:d7:89:65:39:f5:4c:7b:cf:2f:da:0c:c1:2d:
91:54:03:31:6e:16:9a:39:f7:11:63:0b:f9:e1:9d:33:05:63:
28:3d:fc:2a:eb:b0:cb:6e:58:48:e8:2c:11:1a:22:8c:8b:ae:
96:50:d7:3a:43:7e:2f:94:44:97:73:3b:12:cc:b5:fe:85:ff:
8d:96:0e:69:31:a8:e3:5a:9e:36:40:28:df:da:e3:e3:70:9a:
04:24:34:43:c1:27:08:bd:a0:0e:3e:aa:d7:22:66:f0:01:fc:
02:02:ac:b5:88:e3:a6:76:fa:d4:e7:2a:9d:85:df:a9:63:54:
bc:97:ac:b8:e0:85:d4:8b:f3:e8:28:89:71:8a:cf:bd:82:ef:
23:58:ea:a9:28:21:e0:7b:58:ee:55:bd:58:7c:2c:59:ff:a4:
c2:c4:5e:b9:14:98:7b:32:d0:8e:2f:d8:69:c9:e4:6c:24:3e:
c1:ba:01:32:ec:6b:74:00:27:84:c9:72:04:d5:d2:4c:e4:c8:
32:a4:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:31 2025 by rpki-client