Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: vXmDD8rrRA+o/ou0cn3on1vrQMjGJxc5d6u89oUoEGM=
Subject key identifier: 4E:D7:5F:16:1C:45:71:BC:BB:3A:4D:37:19:82:70:5D:74:34:2E:54
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 01987DC1311A9768EACF231560E1591182D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:01:09 +0000
Manifest this update: Wed 06 Aug 2025 05:01:09 +0000
Manifest next update: Thu 07 Aug 2025 05:01:09 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: mMbDzTS4+rLqfm5RtFzA7wOXmoUFUDhFoEsmt12ZmN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:31:1a:97:68:ea:cf:23:15:60:e1:59:11:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Aug 6 05:01:09 2025 GMT
Not After : Aug 7 05:01:09 2025 GMT
Subject: CN=4ed75f161c4571bcbb3a4d371982705d74342e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:81:2f:6d:36:84:cc:fc:92:f8:96:7c:aa:
4a:6c:dc:7f:03:30:98:a8:88:13:0c:f3:39:2c:ea:
8f:fe:ff:88:a2:2d:45:f2:65:d0:1c:0a:ab:0d:52:
82:86:99:37:e2:50:bc:fc:09:ed:85:88:c4:e3:af:
a0:e4:d0:89:4d:19:8e:f5:d7:2e:c6:64:42:7c:90:
9b:e7:63:7e:72:41:26:ec:5b:1c:94:4a:60:71:ed:
4c:e7:cc:ee:48:7a:27:13:63:a5:fc:35:15:a8:15:
02:e7:65:2e:ca:db:91:7a:94:7a:9e:61:f8:35:a3:
72:f6:dc:76:1f:a6:e9:d8:f1:7d:f3:37:d3:ed:c0:
02:d8:88:e4:91:5b:c2:a6:71:78:32:37:f9:80:da:
29:c3:0a:1c:37:9a:58:af:c1:96:56:b1:77:b3:55:
a5:d3:54:60:bd:cc:ac:ff:b5:1f:e7:1f:16:e9:3f:
af:56:e4:d5:7d:b2:8f:fb:7f:3d:72:70:fc:94:53:
31:53:d8:d5:c0:84:6c:53:43:fd:07:67:fb:6f:bb:
be:8d:83:24:05:a6:44:d1:bf:8b:d1:9a:63:22:d9:
20:19:25:08:e3:bd:48:b1:61:ba:1b:68:d5:cd:28:
65:ae:bf:da:9b:40:f6:73:2e:72:25:ff:0a:9c:e8:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:5F:16:1C:45:71:BC:BB:3A:4D:37:19:82:70:5D:74:34:2E:54
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:cc:70:11:03:e2:a1:30:4e:bd:b6:48:bb:6b:cc:4c:79:
12:8a:b2:02:c6:64:4b:ff:cf:0a:9e:9d:0d:62:96:a8:94:7d:
9b:89:90:5d:e2:80:9c:63:df:bb:ac:91:65:e9:b5:e2:51:f8:
a6:d2:ba:21:51:65:a2:8c:2c:ba:9b:6e:8f:fe:fd:4b:b7:e7:
77:24:cc:20:99:a7:e8:40:6e:e4:30:81:2d:08:26:a2:28:d9:
86:e4:74:d9:0b:76:9a:a7:fc:18:92:83:8c:59:48:95:af:04:
3f:93:fa:52:4d:e2:25:6b:b9:07:e4:f3:5a:49:cd:1c:d9:3f:
71:fa:d6:aa:14:a8:36:b4:2e:de:e2:03:ba:1a:5b:ae:40:2c:
5b:80:eb:03:e1:d0:e2:5b:9e:e9:31:d7:40:ca:9e:de:34:8b:
ab:a8:a4:d9:fd:b4:d7:4b:6a:6a:eb:e2:e4:83:58:ef:41:a8:
ae:e6:ae:a4:37:9f:2c:8f:31:00:33:f7:9f:a3:1d:67:42:94:
24:f1:a5:ae:b5:1e:41:c4:9a:4e:71:55:f0:19:da:25:89:29:
6e:42:f0:0e:37:07:39:08:0d:b5:64:4a:34:46:68:39:4c:72:
67:eb:cd:73:5b:af:52:fb:32:11:dc:76:a7:22:7e:07:af:ea:
72:99:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:25 2025 by rpki-client