Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: Nim1lqmnpaLgxUFU1sY1hKRclRKTt+sOzfDBlKutEU0=
Subject key identifier: 65:48:5F:40:A4:02:6F:EB:80:E7:4D:4A:68:C4:40:51:D3:E3:27:73
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 0198D5163E24EE6C2CCEB5E1209DFC6D2BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:01:01 +0000
Manifest this update: Sat 23 Aug 2025 04:01:01 +0000
Manifest next update: Sun 24 Aug 2025 04:01:01 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: yNZwm8R2udRi4km/DhWSiq+WPnI/Z2zwPQ6ntrmrmIM=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3e:24:ee:6c:2c:ce:b5:e1:20:9d:fc:6d:2b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Aug 23 04:01:01 2025 GMT
Not After : Aug 24 04:01:01 2025 GMT
Subject: CN=65485f40a4026feb80e74d4a68c44051d3e32773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:5f:a9:55:d3:39:92:4d:f2:89:c8:21:c5:
51:34:1d:55:00:9f:c0:88:6e:e1:62:d4:45:2f:52:
cc:e4:65:76:60:69:79:2f:2b:88:c0:4e:2e:c3:85:
66:85:1a:91:65:12:4d:71:fb:90:4d:27:b0:bf:e9:
d3:8a:1e:cf:22:f0:38:2f:67:62:16:11:e8:09:22:
98:31:cf:01:09:e3:fd:6f:87:04:58:9c:64:fa:d6:
91:2d:bb:b7:ef:dc:8c:e6:8f:1d:1e:a7:07:51:5f:
33:1e:35:38:da:83:1c:38:de:3c:49:be:83:3b:f4:
7c:1a:82:26:26:c1:20:c7:a7:b0:7c:a8:14:e6:50:
11:8f:37:22:ce:55:c9:9e:c4:91:b5:bd:02:77:f3:
06:32:9b:76:2f:af:8c:20:81:85:a6:9a:10:ba:49:
ec:ab:3d:29:8f:21:8a:ad:b9:5f:90:b4:47:ca:b0:
ff:dd:ab:85:79:3f:d1:da:8c:5e:f7:6a:14:ed:40:
f1:de:93:45:83:ef:a9:25:26:5c:7f:c1:34:73:e4:
e3:21:be:80:72:5a:b3:3a:ed:eb:f9:aa:98:14:76:
06:0c:38:5b:98:db:31:5c:c4:95:bb:14:93:33:17:
c6:42:87:c5:9f:9e:34:b9:8a:53:66:88:2e:5b:2c:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:5F:40:A4:02:6F:EB:80:E7:4D:4A:68:C4:40:51:D3:E3:27:73
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:81:0a:78:a6:0f:a9:87:5e:de:08:e7:85:17:d9:2e:31:
e0:7c:31:bc:8c:86:04:50:f3:6a:0a:34:57:f7:30:c8:84:cc:
0a:0b:dc:c7:4e:76:25:e3:fe:08:23:d2:01:5c:02:df:09:e7:
ac:4a:cd:c3:35:82:05:be:6f:5b:36:e5:8d:04:1a:70:ea:1a:
6d:5b:53:14:79:71:9a:56:be:25:d6:75:c1:98:f9:00:ec:ce:
be:99:39:43:e6:99:9b:8d:19:e3:d3:8f:ca:22:10:f4:ab:1d:
d9:cd:99:1c:2f:10:69:6b:d3:d2:b0:91:01:00:84:63:2c:e3:
9b:4f:95:a7:7b:ec:54:04:23:d6:c4:6a:83:50:e6:28:7e:b6:
f1:14:7b:9b:fc:4f:f0:86:5a:1b:c7:6e:d7:06:23:a9:5f:ac:
ea:41:7b:56:7d:59:57:63:33:63:ee:44:d4:06:39:0c:31:f6:
e4:35:42:18:ab:a7:9e:89:0a:3e:a4:ec:8b:3c:5e:90:ac:4c:
9c:c1:54:ad:e9:8e:7e:7e:d0:28:3d:3c:98:69:5d:cf:09:08:
7f:73:e2:39:26:91:66:0c:09:1d:ff:8f:ee:a4:cc:b6:d6:ef:
fe:75:f4:18:e7:c6:d5:12:76:09:9a:87:49:1a:bb:69:de:92:
87:7d:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:51 2025 by rpki-client