Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: OUL6/pTlAzncM483F+Q6G4e/NKEquiumEjioLXUrZS8=
Subject key identifier: 89:BF:D4:39:7E:EF:34:21:79:71:78:24:9D:51:09:71:8D:18:9D:19
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 0198D65F8BC7ACB0AD119141A9A559D161A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: LchgkB10uDFOYgvxXLRstxYwGuOSCnacDa+14yyaAMs=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8b:c7:ac:b0:ad:11:91:41:a9:a5:59:d1:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=89bfd4397eef3421797178249d5109718d189d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:6e:f1:9e:c8:5e:b2:88:95:d9:44:0a:22:
fc:41:17:8e:82:e2:21:75:a5:03:2f:9a:85:89:d3:
c2:3d:f7:c9:a6:77:62:95:b9:55:27:79:94:64:da:
e2:ec:54:2b:03:75:29:4b:40:78:90:bb:26:77:be:
01:fa:a2:91:a2:18:44:a6:ce:a1:dc:77:0b:58:64:
05:c5:e3:08:0d:94:ed:7f:9c:cc:36:fe:54:38:9d:
22:a3:45:d6:08:9e:12:50:69:77:19:e5:2b:ca:eb:
28:6c:8b:77:02:88:ac:71:a3:3a:99:3b:0f:a1:81:
3d:82:1b:3c:41:39:54:f5:6e:df:00:86:a8:31:ce:
bb:cd:45:c7:60:77:f7:1d:ff:f8:83:10:33:5f:6a:
6e:bd:c8:56:d8:fe:c7:31:e8:7b:ee:61:ed:60:f0:
66:e9:59:11:45:56:e9:99:13:19:d3:9b:94:69:f2:
db:81:b2:b5:8f:38:31:73:36:7b:9f:0e:9e:39:41:
2e:d3:04:cd:cb:f1:06:ed:b0:d0:cb:cf:48:b3:48:
42:dd:6d:8a:40:2a:ab:d3:bd:17:82:b3:c2:4d:02:
6f:a2:5a:c4:61:f8:54:1f:7d:6a:3d:e7:ba:7c:5f:
54:45:bf:d8:80:a9:0b:3c:70:eb:ee:56:3e:a8:11:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:D4:39:7E:EF:34:21:79:71:78:24:9D:51:09:71:8D:18:9D:19
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8a:1f:b2:ab:9b:e4:1c:c3:6c:2c:a3:80:03:9b:53:0b:6d:
4a:f1:aa:f1:ba:0d:13:11:65:4d:9f:4b:be:ad:a0:08:cc:ea:
52:fa:15:99:a1:c0:4f:db:df:c9:26:e4:37:e6:4b:a6:ca:69:
15:ea:3e:40:3e:f4:32:3d:ae:87:a4:bf:6a:da:06:8d:d4:d1:
6a:12:10:63:2b:79:be:d4:18:88:57:47:88:be:b0:4b:19:01:
8f:49:4d:e9:df:df:40:73:51:b0:98:06:82:c0:22:bc:e9:58:
c6:ea:1a:ef:db:70:99:66:9d:b8:6c:b3:0e:d9:1e:7a:56:4b:
bd:06:cc:c9:9a:b0:15:55:aa:d2:4f:a8:29:04:4c:6d:d0:df:
e1:5d:8e:73:88:b7:6a:b4:86:b4:d7:76:75:92:a0:cb:3a:3e:
13:c9:25:92:12:f5:00:bb:e1:b3:09:1e:1f:2d:37:32:7e:7e:
15:a5:f1:72:51:d8:ec:d4:47:ac:aa:08:dc:7f:c9:36:34:df:
0f:98:83:64:5a:39:45:dd:0d:f3:02:f2:aa:e8:d2:e9:73:d8:
d1:6e:aa:a1:24:fc:1f:da:4a:37:91:cc:0e:ea:a7:53:ef:e2:
64:0f:8e:ad:4c:51:d8:5c:b0:78:9d:8c:7c:e1:d7:c6:f3:51:
fa:f0:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:02 2025 by rpki-client