Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: 1aXKt4XS2b/JA8kcyXnOcM+QchXtFCNkzHMoWxV0KdU=
Subject key identifier: E8:9F:F8:63:F7:48:27:3C:C8:71:6A:FB:61:52:DB:27:62:06:32:58
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019896A4DCCFF1049C4B974DED42140FC3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 162E
Signing time: Mon 11 Aug 2025 01:00:43 +0000
Manifest this update: Mon 11 Aug 2025 01:00:43 +0000
Manifest next update: Tue 12 Aug 2025 01:00:43 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: Np8rKUq30TVCp0HXgBqPy5TbDLuuP5x0hKSihS52Ui8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:dc:cf:f1:04:9c:4b:97:4d:ed:42:14:0f:c3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Aug 11 01:00:43 2025 GMT
Not After : Aug 12 01:00:43 2025 GMT
Subject: CN=e89ff863f748273cc8716afb6152db2762063258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:46:95:6b:99:1b:71:c9:c1:4b:1a:e0:28:
ac:63:91:d6:c6:90:d9:61:5d:4b:0f:ff:90:30:2e:
b9:1e:52:0f:ce:85:19:0c:0a:34:34:72:cd:14:5c:
91:58:e4:e4:c9:9f:d8:a4:95:27:d7:0e:16:ea:b0:
96:c5:ee:0d:a0:ac:3d:d5:89:85:9d:94:bb:ab:d1:
2d:c1:dc:e9:5c:0e:aa:ef:c4:65:29:20:5e:96:cf:
24:5b:4a:73:80:7d:74:43:b7:bf:6a:a4:48:23:4f:
aa:67:22:b5:e3:5a:af:13:cc:51:49:37:df:b8:75:
d6:d4:79:98:3b:96:8f:78:15:47:08:d4:aa:14:e4:
c5:46:d1:dc:94:88:70:3d:87:11:c5:51:0c:a3:2e:
db:90:b7:5a:56:ca:40:67:8f:42:4c:e7:d9:05:a9:
fc:5d:94:6e:92:5d:7c:1f:fe:e0:4c:45:63:38:a0:
f2:f0:44:ec:48:b7:b2:e3:ca:75:3c:cb:9d:65:d0:
e9:10:70:62:14:57:51:95:1d:44:61:6f:00:c6:dc:
4c:51:00:d8:bb:eb:44:42:14:70:16:fa:11:c4:21:
9a:02:5e:ba:25:5b:81:57:1f:e7:17:78:c1:20:c1:
e5:c6:90:e8:d8:63:b6:3e:50:52:e9:b6:2a:74:72:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:F8:63:F7:48:27:3C:C8:71:6A:FB:61:52:DB:27:62:06:32:58
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:65:7e:a9:2b:a4:e3:8c:49:5d:da:ea:ea:2c:c6:34:d3:
4f:5f:db:03:60:cd:54:a9:32:77:4e:27:82:bf:79:06:d0:4f:
ba:0d:be:7b:77:54:52:84:b9:ac:77:59:c9:be:64:bb:ab:bd:
f6:35:fa:c3:bd:65:9f:e1:c0:7c:6e:db:63:43:36:ef:43:39:
c0:5a:40:30:4d:77:c4:36:0a:94:d5:97:bb:f1:53:76:f5:0f:
bd:92:35:13:56:a3:0e:3e:7d:df:f7:76:1d:5d:0c:4c:bb:62:
08:d2:0f:02:48:c2:6c:fa:75:8e:01:b5:ba:c0:1f:c9:cb:ec:
f1:76:3f:7e:d3:1a:09:fb:06:cf:55:25:0c:fc:95:b5:0a:a4:
47:c8:66:38:f4:42:71:2a:29:e5:ef:92:83:3e:e5:fb:0c:cf:
6c:82:24:d1:0f:2a:f0:df:64:f4:89:b6:3d:9c:88:1e:b7:68:
24:45:37:1c:86:c8:ea:63:90:a5:a5:1f:0e:08:88:e7:92:e4:
d4:50:8d:9f:4a:5b:1b:c9:ed:16:e4:b8:02:c1:8a:64:1a:99:
a5:35:50:50:30:06:95:bd:74:c0:26:cd:21:53:56:7f:b5:d1:
e3:bf:eb:56:9f:de:76:d1:d0:38:b8:09:48:e6:94:ef:4f:0c:
e3:0d:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:51 2025 by rpki-client