Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: KIWQoJs9L15S0sWMiManmA8tEFH65Gkfmq6Svs7pnEY=
Subject key identifier: 9C:00:DF:54:B9:23:AD:7E:64:BF:D9:FD:AF:80:F5:3B:A8:4B:63:FA
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0198819DBB3A6B569B97125542625E66F121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 23:00:54 +0000
Manifest this update: Wed 06 Aug 2025 23:00:54 +0000
Manifest next update: Thu 07 Aug 2025 23:00:54 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: 5B2kSpRmO1S9FW1XYN1qYBeblvqCfv0WI5jYWQqsJ+Q=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:bb:3a:6b:56:9b:97:12:55:42:62:5e:66:f1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Aug 6 23:00:54 2025 GMT
Not After : Aug 7 23:00:54 2025 GMT
Subject: CN=9c00df54b923ad7e64bfd9fdaf80f53ba84b63fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:26:83:9c:45:c9:57:9b:46:99:c4:f3:62:
87:3d:a8:54:91:8e:76:06:23:31:55:21:fd:bc:db:
51:8f:b6:f3:40:86:8b:79:95:95:95:7d:90:0f:96:
21:85:ac:90:7b:0d:0f:6d:f0:56:c6:5b:61:29:a3:
77:63:c8:2f:31:c2:fd:20:d6:93:8b:07:85:c5:4e:
cc:b2:ed:97:54:25:f4:8d:b7:cb:76:41:9a:2d:c9:
46:85:18:fc:aa:d3:aa:28:bd:f9:d8:7a:11:03:a0:
86:b7:0a:e7:d4:f6:42:67:0a:56:0f:e5:3c:6b:80:
80:03:ed:87:8a:87:bf:15:df:6c:14:50:e7:b3:24:
81:3c:41:c8:36:b0:9b:b7:6b:01:fb:a6:26:7c:39:
63:c0:ce:d4:ad:8a:af:33:3a:46:73:9a:a1:ba:22:
bd:6c:4f:c7:97:0c:c8:c2:b8:57:9c:cb:a4:56:62:
03:59:51:f9:fc:d6:7c:20:5b:32:d1:67:8f:84:74:
65:80:56:dc:91:00:d5:df:a2:de:ce:14:86:e0:03:
0b:42:f4:d9:c1:dc:9c:85:3c:de:3a:12:ee:9f:83:
04:05:f5:e1:d3:05:31:e2:03:56:3b:a0:b6:47:2d:
09:7f:6e:eb:82:54:0f:de:08:64:ab:2b:95:a5:d7:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:DF:54:B9:23:AD:7E:64:BF:D9:FD:AF:80:F5:3B:A8:4B:63:FA
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:7a:5a:e7:e3:f9:0d:3d:f6:b9:3e:9d:f8:f4:17:d7:d6:
7d:5d:e7:da:57:02:3e:2b:2a:b2:3c:06:ff:f2:bd:55:63:61:
5a:43:27:33:dd:d4:24:28:83:1e:50:5f:d5:22:9b:41:df:e5:
01:6f:00:c4:83:15:b7:b7:97:c6:e0:b3:16:f5:04:22:bc:6f:
2f:62:c0:b0:ca:c6:b9:a9:54:07:0f:33:d2:bd:18:e5:d6:8c:
d9:d6:7a:ee:d4:8f:6e:8b:33:a9:69:40:24:11:2f:65:2a:6b:
8c:be:2e:90:54:82:93:cb:03:33:52:f6:8c:19:55:12:dc:49:
6f:5e:5c:69:83:41:ff:7c:a7:a0:15:69:a7:f6:dc:ae:95:1a:
c7:53:5e:57:13:40:1f:5a:48:a9:f7:5a:86:57:57:ab:b3:a6:
d9:46:76:36:38:ac:ff:6f:85:53:e6:46:8e:52:07:3b:7d:d9:
04:ce:9c:39:06:ae:1d:af:21:ed:a0:ca:e1:86:76:68:7f:53:
77:e0:5a:c1:76:f3:8a:f0:0a:eb:00:ee:17:fc:41:07:08:e3:
76:5d:0a:6a:7d:68:8d:44:c3:5f:bf:8b:3b:8b:5d:73:12:68:
2a:3a:2f:b5:80:53:49:a1:14:a8:bc:6d:a8:3e:0f:51:17:25:
15:2a:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:05 2025 by rpki-client