Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: kwBL3qrH0DFzE47OGLacQrFvRIMtop6c+mXnxtoEf9A=
Subject key identifier: A5:52:4F:04:E1:11:EF:AF:65:25:E3:68:0D:03:D9:5C:0E:C2:A5:F8
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01987DF8174892CE69470CB7F6C43A251BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 06:01:07 +0000
Manifest this update: Wed 06 Aug 2025 06:01:07 +0000
Manifest next update: Thu 07 Aug 2025 06:01:07 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: g88eIHT2IlZFN0U4laOh2qiX184ym033Gru0mDP5ufo=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:17:48:92:ce:69:47:0c:b7:f6:c4:3a:25:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Aug 6 06:01:07 2025 GMT
Not After : Aug 7 06:01:07 2025 GMT
Subject: CN=a5524f04e111efaf6525e3680d03d95c0ec2a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:ef:e9:99:84:89:d4:70:90:b9:88:a5:e8:
f8:e1:a1:56:b6:8e:1d:77:38:ea:75:bd:b7:8f:12:
fd:03:d8:b2:46:c6:8b:97:8c:67:8b:e3:18:61:dd:
e2:8b:50:4b:22:4d:71:f2:e1:3a:5d:ee:3f:8f:fd:
b9:5d:4a:69:46:19:43:68:e6:19:47:8d:de:d7:4e:
e5:f1:6c:fa:60:85:0c:8b:7c:00:30:52:c7:d9:30:
c5:83:95:c0:26:06:0a:fe:60:99:94:bd:01:1c:90:
cf:1e:fd:a7:b0:84:9e:3e:41:62:79:7c:c5:29:08:
31:f5:89:88:fe:6f:be:5c:2e:bc:38:71:55:d5:98:
74:f6:12:26:ae:0f:9e:37:36:64:11:1b:1c:4e:ac:
36:c8:13:ca:8e:73:06:f3:e6:0e:de:92:cb:aa:26:
97:9a:43:4c:7b:ed:d0:ee:ac:c6:0e:90:bd:9e:ff:
20:1e:af:5c:c6:85:7f:8c:5b:32:bb:81:e9:c5:ae:
d1:f7:39:92:dd:70:32:81:be:b1:78:b6:6c:6b:f4:
41:29:a0:7f:47:e6:e2:84:cc:b0:f7:30:1a:85:16:
b5:3d:ef:c3:7a:6a:5e:e4:ca:78:be:f3:b4:0b:c1:
8b:c6:c3:26:64:ed:e3:46:54:56:fc:cd:e7:e2:e2:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:52:4F:04:E1:11:EF:AF:65:25:E3:68:0D:03:D9:5C:0E:C2:A5:F8
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a4:27:e5:83:02:d4:9c:da:b5:3a:02:8b:ed:45:79:8a:8d:
42:5f:b4:cb:43:d6:2b:58:6a:86:d2:f6:c5:d5:6b:5b:7e:c0:
89:b0:ed:1d:3e:37:5e:e2:56:cb:8f:2d:18:8f:83:2a:05:24:
4f:d3:71:a5:6f:bb:88:15:6b:9a:da:5c:11:61:c6:21:2d:96:
a5:dd:8a:ce:ed:9f:cc:c7:33:41:2d:e5:f0:9f:36:ad:50:6d:
80:c8:b0:00:a0:18:5e:11:a1:b2:51:bb:8e:3b:3f:7e:77:41:
86:36:db:18:41:0a:5b:e9:8e:8e:b7:42:a9:c8:9c:42:03:d8:
b8:53:99:df:9b:da:40:fb:81:ce:a5:72:28:d1:de:c1:6d:dc:
59:8b:fe:bf:b1:e8:93:f7:31:a4:c0:f5:e9:99:d6:5d:65:a9:
ff:aa:70:03:4d:52:ec:fc:2f:04:e6:00:5c:99:88:b0:00:fb:
25:61:0a:a6:23:c5:b3:5c:39:58:ad:66:2a:be:ab:03:d4:fc:
3c:d5:97:4f:6f:5a:16:03:2f:a8:e7:34:76:1d:10:9c:ee:26:
fc:d5:01:93:27:38:46:e3:ee:a4:b8:1d:98:9e:e4:4d:9e:19:
64:d1:f1:7e:cf:e9:47:77:55:ca:f7:37:ce:48:3d:8c:33:85:
89:64:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:39 2025 by rpki-client