Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: wBNE9qm96lvbffRiRy46ehE67LATAa9H8foUkzlsh48=
Subject key identifier: 2E:31:64:43:AF:F4:6C:B7:0A:0A:A6:A2:EB:C3:96:2E:E2:81:FE:AA
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01988356FA37200111C0A1275D3118BF6A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 07:02:52 +0000
Manifest this update: Thu 07 Aug 2025 07:02:52 +0000
Manifest next update: Fri 08 Aug 2025 07:02:52 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: 7xNf+3PXa0b7VIZV8mWvJmq63i4xGEm0+gKTJHLTV9c=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:fa:37:20:01:11:c0:a1:27:5d:31:18:bf:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Aug 7 07:02:52 2025 GMT
Not After : Aug 8 07:02:52 2025 GMT
Subject: CN=2e316443aff46cb70a0aa6a2ebc3962ee281feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:f5:a5:f3:b0:59:91:19:2f:a9:fc:50:59:
6b:cf:35:eb:17:b3:17:7d:11:7c:c4:5f:28:65:9c:
66:27:f6:63:a8:f8:17:47:6b:3b:cd:80:df:12:ba:
97:e1:2d:ea:d9:1b:7e:bd:d9:0e:90:19:a6:0e:3e:
03:93:f0:b3:f3:93:78:ea:6b:a5:c5:f6:e1:34:51:
be:28:c6:d8:d4:87:db:3a:87:a6:30:1b:ae:44:ee:
63:09:c1:1d:33:27:b6:76:7d:e7:79:57:70:dd:8c:
d9:cb:d6:9a:af:ae:7f:d5:ba:16:77:55:68:75:4f:
9c:87:85:7f:58:69:88:ae:0f:35:8c:c2:8b:57:d1:
d8:4e:96:17:5d:94:40:8d:2a:e8:64:1b:01:27:d7:
bc:05:21:79:1e:87:9f:9d:1e:9d:83:94:32:91:1b:
a2:1e:29:2c:38:27:ad:c6:a0:7c:f9:91:ba:2d:05:
dd:30:f9:ba:8d:b8:3a:31:c6:07:a4:78:83:89:8c:
da:58:28:f3:3d:e3:0d:d3:bf:a4:47:cd:0f:ec:8a:
a0:08:ce:9c:4e:0a:e3:44:69:b9:41:d4:08:e3:22:
b3:c0:5b:d4:dc:71:67:78:73:30:44:15:c7:40:a5:
90:09:28:c1:fb:4f:b2:d9:5f:83:09:85:1b:68:f3:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:64:43:AF:F4:6C:B7:0A:0A:A6:A2:EB:C3:96:2E:E2:81:FE:AA
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:fe:68:3e:49:e8:b7:65:79:25:4e:79:9f:e2:03:df:66:
57:47:e3:4a:fd:8b:99:cf:7f:ef:1e:a0:07:87:aa:b2:8e:d4:
19:37:ab:ab:f9:36:ee:a3:0b:dc:c2:65:a9:a8:c3:47:d6:65:
cf:0d:12:72:fc:5c:f7:25:fc:8b:ec:d2:ab:cb:f7:26:88:f9:
c8:fb:5f:37:16:dd:b7:37:1f:c7:47:c4:5b:aa:8b:45:62:3e:
fa:eb:35:95:b8:6b:5a:f4:38:69:89:d8:16:a5:f1:58:fc:8d:
e5:12:9e:f9:a0:7e:ed:64:1b:bd:40:d2:a6:3a:5b:04:d7:61:
48:d9:08:7b:88:a2:9e:af:13:c6:99:97:2a:8e:0c:c9:4d:5a:
c6:7b:9b:66:c8:7b:2f:a7:38:4e:c6:c9:84:bd:cb:91:36:0b:
63:93:ff:8d:a1:d8:31:7e:2f:96:54:b3:9b:ed:f4:c5:c3:74:
06:52:6a:1a:d0:19:39:30:09:6b:39:29:85:9f:8f:1a:ab:c4:
37:0b:ff:d8:b4:fa:97:ea:b1:16:b4:c3:80:7b:ad:0e:a2:ad:
42:f8:a8:84:48:9d:10:3e:01:2b:ee:95:c9:c2:7a:70:38:c4:
19:d9:18:a3:5f:fb:a5:bb:9b:ae:90:01:88:9a:0f:3b:41:64:
16:59:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:04:56 2025 by rpki-client