Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: s9AvmUAsqbUcp88ucxxwhkF/4lNfStstDzNcm6mPqlw=
Subject key identifier: 37:43:0C:9A:20:C5:16:4F:52:21:C1:FD:79:7A:EA:BF:90:84:72:D9
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 019879083EB1536BA9FF209C0194D4723CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 07:00:39 +0000
Manifest this update: Tue 05 Aug 2025 07:00:39 +0000
Manifest next update: Wed 06 Aug 2025 07:00:39 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: QZvaVCnNor8lUC0oZY9OmYZTERxYA5tZjh7D/r2IrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:3e:b1:53:6b:a9:ff:20:9c:01:94:d4:72:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Aug 5 07:00:39 2025 GMT
Not After : Aug 6 07:00:39 2025 GMT
Subject: CN=37430c9a20c5164f5221c1fd797aeabf908472d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:e9:88:1c:77:8b:9e:53:1f:3a:9f:38:21:
3d:f6:ba:50:d4:8f:2f:09:2c:d0:f6:1d:31:f9:ff:
8b:03:59:4b:7d:5c:45:4b:0a:1e:c6:84:66:e4:97:
3a:97:18:57:e2:6d:69:87:05:da:5d:66:f2:66:92:
a0:72:9e:95:7a:58:46:90:f3:ac:3f:00:1e:19:ea:
0a:a9:09:63:4e:0f:26:03:ee:0c:de:bd:12:71:79:
58:94:95:61:04:1d:b7:de:b5:1c:5f:5d:c2:4f:53:
c2:07:64:11:f4:0e:b8:93:a3:4b:1f:a9:b0:e5:53:
1a:d8:71:94:24:b7:fc:66:b4:f5:33:07:3b:f0:95:
c8:26:17:e2:ba:b0:78:c5:ff:b6:63:4e:e5:1c:e0:
ae:9c:6f:41:40:98:ab:14:78:15:e8:34:d4:83:46:
9d:99:2f:65:d4:52:94:cb:8f:8c:e9:e8:91:75:cc:
5b:37:45:46:33:c0:79:5c:7b:b0:7c:e5:81:d3:d8:
db:24:e8:7d:02:fa:a3:98:c2:32:4b:d5:b6:92:92:
7c:bc:f0:7a:c8:fb:b0:71:f5:d2:fa:9d:7b:ea:f2:
93:a5:3d:d2:85:b0:d5:89:67:d6:5c:b3:9b:20:77:
0b:01:3d:dd:6b:b7:93:f7:4b:52:83:ae:f7:2f:5c:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:0C:9A:20:C5:16:4F:52:21:C1:FD:79:7A:EA:BF:90:84:72:D9
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:06:df:f8:84:1e:f8:83:6c:86:36:d4:e0:7e:bb:77:d3:20:
01:73:48:c5:fd:5d:77:62:e5:f5:c6:54:cd:94:d8:23:f8:e5:
c1:33:b3:f5:09:75:5c:f3:c7:ed:f2:cd:51:db:97:ec:1f:cc:
17:0e:40:bf:1e:ea:44:fd:e1:cb:a1:17:25:81:c4:e6:6f:06:
68:46:66:68:f9:78:c3:34:8a:22:0f:16:cc:4a:b3:7b:f3:f0:
59:fa:1a:b7:2b:2c:70:56:85:e1:4e:05:e2:52:da:2f:ca:31:
32:d1:87:43:a4:c0:b4:20:32:81:a0:01:68:fb:f8:43:6f:2d:
0d:97:5a:a2:4c:de:21:98:f6:17:9b:0a:43:02:cc:ab:4a:f0:
6d:8b:2d:09:70:29:47:1d:d7:86:e9:98:19:29:be:f7:de:27:
2a:1c:cc:f3:65:eb:9d:34:ae:41:8d:51:b5:21:f7:7d:2d:75:
4e:19:2a:2a:f4:e1:29:c5:e8:13:a7:27:6e:d1:dc:d9:d5:57:
90:cb:35:47:29:40:1b:f6:66:70:8b:35:a1:1b:b5:91:46:cf:
14:4a:9a:51:da:68:5e:b0:d4:ce:26:b6:14:c2:b6:20:09:fd:
9b:bd:88:bd:0f:a4:79:f1:4e:d9:41:6d:3f:54:a9:47:bd:21:
93:9a:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:48 2025 by rpki-client