Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: QOYQRKZdLZqJ30W0jSMsBOv8X9DxW6o5gMX7i/fCXPk=
Subject key identifier: 88:55:81:14:5C:40:0F:60:64:54:70:D5:C6:09:A4:98:4C:FB:FE:9E
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01987306FE29F21E2FB8BD2EFD9FB6AF4FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 03:01:34 +0000
Manifest this update: Mon 04 Aug 2025 03:01:34 +0000
Manifest next update: Tue 05 Aug 2025 03:01:34 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: /xTtSBjXY9e8dR05TmqHNsAwXZAnJkOny7qxIztPASo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:fe:29:f2:1e:2f:b8:bd:2e:fd:9f:b6:af:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Aug 4 03:01:34 2025 GMT
Not After : Aug 5 03:01:34 2025 GMT
Subject: CN=885581145c400f60645470d5c609a4984cfbfe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:8e:23:9d:79:97:fb:ff:c8:cd:db:80:5f:
5a:e3:55:a1:88:f2:5a:e8:9f:e2:ed:03:e5:54:6d:
ee:cb:ce:fa:b2:ed:06:b8:d6:b5:1a:08:39:ec:c6:
40:2e:71:dd:8b:1e:11:de:df:96:4f:1f:9f:64:17:
5a:c4:2e:73:85:90:76:13:9c:16:99:7a:57:0d:5e:
c3:33:a3:24:7d:c5:44:31:35:70:03:98:f6:c7:be:
8b:72:aa:76:17:8c:fb:80:b5:15:36:dd:3b:88:ef:
4a:85:af:81:23:46:88:72:40:77:58:a1:8e:e4:b8:
ac:bc:a1:31:95:05:99:9d:0a:a5:b8:d6:f4:a7:56:
ab:d9:1e:30:14:ad:90:44:c7:49:32:9a:92:e3:eb:
a3:0e:8b:84:ed:af:20:8d:60:31:04:1f:ff:97:a2:
82:8f:1b:50:67:61:56:66:9b:47:85:51:0b:d0:56:
30:72:0e:15:2b:ef:57:5c:13:73:19:fe:9b:fb:09:
a3:84:0f:d5:d9:d0:8d:93:c3:81:a8:31:2e:b3:9d:
3a:c0:49:a1:2c:30:e8:48:38:83:f9:de:4b:a0:f0:
2d:19:43:f2:7b:eb:38:09:36:94:ee:35:ca:a0:e8:
b0:68:1b:b3:a7:ac:e3:7c:ba:04:e6:4d:68:37:65:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:81:14:5C:40:0F:60:64:54:70:D5:C6:09:A4:98:4C:FB:FE:9E
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:df:c7:f3:00:97:2b:c5:69:a6:09:e7:61:9a:61:cb:43:
7b:d9:7c:a9:38:54:01:e5:9d:ce:fd:2d:54:14:e7:98:ea:eb:
d4:4c:ef:1d:7a:28:04:a6:cd:ed:81:38:a8:c2:4e:09:e8:6f:
15:84:dc:aa:5a:5f:b0:6b:e6:5a:d1:3d:1f:f7:69:8f:fe:f3:
db:c3:67:3c:d8:15:34:d7:e9:e7:32:34:59:c4:7a:d7:e2:79:
a2:fa:e5:7c:cb:fd:7f:3e:48:6c:9d:4d:6d:21:f0:1d:5d:9a:
8d:8c:e1:22:6c:73:9d:02:58:bc:92:ab:68:9a:45:4f:91:51:
fc:29:5b:76:6c:0d:48:24:08:9d:54:6e:0f:7c:3e:0d:92:21:
d5:38:ba:b4:81:83:97:b6:5b:2a:0b:e3:4b:c7:13:f3:0c:56:
34:69:80:ff:ce:f3:59:13:99:8c:83:72:fc:cd:da:1a:df:9e:
62:74:e9:26:d4:a7:07:b7:09:5f:a2:c8:63:8f:7c:53:69:bd:
7c:cd:bc:f5:b5:01:bd:a6:1e:09:ba:9d:1e:c9:1e:d0:c1:35:
e2:d7:e1:2e:3b:b1:ed:e0:c8:7d:c9:56:d9:62:4b:ed:0a:59:
db:20:68:b0:c6:f8:43:42:59:8c:88:ed:43:c8:4c:63:61:c2:
bd:7c:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:06 2025 by rpki-client