Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: HoaPwWZyr7Y5oeEiLK8miY9PsAIgAzCdGvMV2Aoc0Lg=
Subject key identifier: A2:31:21:7F:81:E5:31:50:4B:69:76:AC:0A:A2:5C:DC:CB:3A:C6:5F
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 0198D7E1197168D7C0F0D64BD8FD76167EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 17:01:50 +0000
Manifest this update: Sat 23 Aug 2025 17:01:50 +0000
Manifest next update: Sun 24 Aug 2025 17:01:50 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: jF8tk7lI24FitpckZYj/KHfAfK+/jd1+2ji2ScdGGoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:19:71:68:d7:c0:f0:d6:4b:d8:fd:76:16:7e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Aug 23 17:01:50 2025 GMT
Not After : Aug 24 17:01:50 2025 GMT
Subject: CN=a231217f81e531504b6976ac0aa25cdccb3ac65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:25:27:d3:ea:ad:99:1c:63:0c:3c:0d:0b:
e6:e0:e3:7e:74:e3:98:42:c1:f3:02:fc:04:e4:22:
5a:d1:5b:98:11:76:be:45:64:d6:09:dc:cc:3e:6f:
00:64:16:56:e1:0f:c6:df:78:93:f8:88:7f:50:ad:
84:61:a5:2e:0d:58:60:70:55:98:1a:59:6a:f2:55:
10:a6:cb:7c:6e:d5:e2:98:ef:dc:2f:f3:aa:20:82:
be:f8:59:65:ce:91:33:67:ac:b2:b9:80:82:08:dc:
95:61:dd:c3:b0:74:08:b1:c8:a4:5d:cd:71:3b:9d:
05:e7:a9:39:8d:f5:ec:d8:4c:2f:40:99:7a:cc:2e:
c5:5c:d1:d5:96:f1:e9:64:e2:e3:81:bc:08:64:9d:
83:fb:73:9f:15:fa:22:49:73:79:84:85:33:54:11:
41:d6:31:18:1d:33:c5:cc:46:de:00:3e:8e:dd:60:
20:00:c4:63:e2:57:cb:ac:26:00:f5:11:30:f4:5a:
e2:e3:ab:0d:dc:04:62:cf:57:ad:ac:03:0d:30:1b:
3e:95:19:58:65:93:96:4e:68:46:ed:85:92:1d:3a:
44:e3:b0:2c:5f:f7:81:90:dd:2d:dc:bc:bb:7e:37:
c1:56:6d:87:89:f7:38:17:d5:36:d0:64:96:b7:22:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:21:7F:81:E5:31:50:4B:69:76:AC:0A:A2:5C:DC:CB:3A:C6:5F
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:93:4b:a1:8a:2a:2b:b3:9b:e5:9c:7e:fe:9f:6a:c1:75:
d2:2f:1d:b3:7c:7e:bd:7c:ea:bb:f5:fd:cf:02:79:02:9e:e6:
e8:b1:67:ea:b0:f9:a8:40:cd:e0:15:05:d1:50:ba:c3:e4:cf:
90:14:ca:fa:1f:d8:0d:1d:11:d1:25:74:59:86:c7:44:64:73:
4c:75:d3:bc:e8:03:12:b3:75:2d:3b:a7:b7:77:b4:82:0a:f7:
41:63:04:4e:e1:83:85:2b:1a:70:be:8b:40:05:e0:f4:d2:9b:
7a:21:ea:a4:10:f6:8c:ea:f8:bb:11:8c:08:64:fb:f4:7c:cf:
0b:ec:4d:92:81:da:db:a5:7c:75:f9:5e:a2:70:f3:65:b2:d9:
a4:73:92:b8:2d:02:bd:97:b4:80:36:ae:0d:44:91:ba:42:6c:
c8:c9:15:ca:a8:b5:b6:38:6a:ff:54:d5:3c:04:91:9c:da:b2:
f5:74:39:b9:e3:36:de:e9:e9:f4:04:c3:e2:25:cb:98:6b:39:
4d:bb:dc:e9:70:aa:52:a1:f2:e6:13:2e:12:5d:16:cb:aa:3b:
de:9b:c6:b3:ed:7e:72:42:d0:89:2b:3c:a0:b8:72:83:0e:4a:
07:93:99:a4:af:d4:14:3f:f6:21:5f:1c:a8:6a:e4:77:83:d6:
e2:89:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:52 2025 by rpki-client