Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: 4DJVAtRBa+zSjLq+G18A38E5/YnoExjx7V56W+xiSz0=
Subject key identifier: CB:F0:4A:66:E4:0A:F0:CE:AF:0F:AA:DE:EC:57:81:DC:76:CE:B6:1E
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01987E66108DBD1F4BF29FB95607917F4341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 08:01:14 +0000
Manifest this update: Wed 06 Aug 2025 08:01:14 +0000
Manifest next update: Thu 07 Aug 2025 08:01:14 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: Hwssc9BAjdByEzmPdcXaR77J63oKLHUG9ec0oxL5TQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:10:8d:bd:1f:4b:f2:9f:b9:56:07:91:7f:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Aug 6 08:01:14 2025 GMT
Not After : Aug 7 08:01:14 2025 GMT
Subject: CN=cbf04a66e40af0ceaf0faadeec5781dc76ceb61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:04:43:a8:eb:91:d8:36:0a:b8:82:57:bc:
23:78:e3:3d:bf:f3:92:70:8a:db:e8:96:93:84:9d:
a9:ef:11:a6:1f:31:79:fe:11:2c:b6:95:76:0c:e9:
d1:fe:2d:8e:07:d5:5e:1d:fa:e9:9a:c4:78:a3:c3:
40:22:45:02:27:00:08:ec:07:c7:56:fb:b8:55:0a:
a2:78:07:2e:c5:f6:dc:8f:0b:ae:b7:7c:a9:60:a2:
af:39:d3:c6:ce:ac:ad:ea:da:d0:a0:6f:c3:d4:ca:
77:a8:50:39:9b:0a:ff:0e:9b:cc:ba:6c:c3:92:ef:
45:f6:26:bc:6a:7c:45:d2:ce:17:38:8e:68:90:49:
e0:1d:76:3b:ac:45:5d:79:a7:ec:f3:f0:99:c1:71:
a3:92:6a:d4:ef:6b:85:1e:fc:f2:cd:35:79:cf:70:
4d:b3:bc:c7:f1:86:05:63:29:3f:7d:6a:86:23:77:
43:ff:e5:7f:eb:b9:c3:38:38:3a:7b:f0:8d:e4:cb:
37:2d:72:ad:2e:d0:d6:73:94:b0:61:a9:94:e0:e8:
01:22:8c:b9:e0:91:25:e7:ca:68:10:dd:55:0d:f1:
6f:e0:31:4f:a3:d4:ac:21:c9:19:70:d2:e8:3a:4b:
3e:83:28:3c:03:d6:de:39:a9:15:df:f0:33:5c:72:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:4A:66:E4:0A:F0:CE:AF:0F:AA:DE:EC:57:81:DC:76:CE:B6:1E
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:29:7e:76:cd:3f:98:8e:3e:91:cc:41:9a:c6:38:81:1e:
0d:fd:c8:47:5d:f6:4b:7e:4e:e3:9c:a9:4a:f6:d9:ca:dc:0c:
ad:a2:80:fa:b9:06:14:f9:0d:ca:7a:cf:92:38:d9:da:65:d6:
24:17:48:ca:2a:f4:76:1a:e6:6e:50:54:f6:42:d4:05:5a:ae:
a4:97:1d:b8:cb:e8:94:c0:9d:f5:d1:1b:12:01:be:84:63:b8:
31:99:aa:76:b9:af:af:a8:82:b1:3f:71:04:5d:e0:b9:3e:50:
b2:3f:79:3a:b6:96:82:1d:56:d2:1c:2e:b0:d8:77:4a:cd:f6:
03:a5:02:80:4b:eb:b7:1e:5c:24:11:69:15:c4:38:b9:f0:d0:
48:6f:5c:9a:de:82:e0:aa:e8:3d:24:3a:cc:5b:6f:5a:1c:fd:
39:13:2f:ac:1c:c3:9d:dd:ea:45:82:10:ec:78:e6:93:e2:09:
29:6e:9b:8b:3f:48:eb:21:de:64:6c:e2:31:48:b7:16:1c:3a:
da:58:68:bb:b0:19:7e:ba:2a:3d:3a:23:b8:b2:14:13:b2:10:
46:0d:05:3a:00:4a:10:61:4f:19:3d:88:bc:cb:4e:37:e2:32:
80:4c:d7:44:ff:71:86:c7:3f:b5:42:83:3e:e5:79:40:62:b9:
b2:a0:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:17 2025 by rpki-client