
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: D2PWRx5gtGd0kh3sQK9FdVv2MOhwHi5JzF5qN1oJjfE=
Subject key identifier: 69:82:5F:0D:8A:5C:85:4B:63:19:38:4A:C0:A6:A4:FD:A8:45:4A:CB
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01988166B73EF20F61670FD950C90CD7BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 22:00:49 +0000
Manifest this update: Wed 06 Aug 2025 22:00:49 +0000
Manifest next update: Thu 07 Aug 2025 22:00:49 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: hOwkf44Go1GMegMfJdIU2KGyEKd5oticXl7Xpgo7cOI=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:b7:3e:f2:0f:61:67:0f:d9:50:c9:0c:d7:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Aug 6 22:00:49 2025 GMT
Not After : Aug 7 22:00:49 2025 GMT
Subject: CN=69825f0d8a5c854b6319384ac0a6a4fda8454acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:0c:e8:16:de:99:e7:5f:6b:c8:08:2d:a6:
58:e7:f4:37:65:59:64:4f:d3:fc:1f:91:09:81:1b:
36:f8:3d:2b:1c:eb:2c:37:9b:79:fc:3e:36:be:ed:
db:ce:25:b5:c5:64:17:d4:7c:db:38:b2:35:3d:df:
41:6c:e6:8b:2f:37:63:3e:41:dd:d5:39:b8:b0:1a:
fb:74:f7:97:e0:b0:69:74:c2:18:e9:57:7f:cf:d5:
4e:dd:a8:d9:5a:cc:cd:3e:c7:bf:63:7f:84:ce:ff:
fe:18:db:53:9f:59:e9:0e:02:83:96:98:a4:9d:d9:
0b:a5:d0:dc:ed:f5:ea:3a:f0:af:29:ed:23:60:90:
3d:73:85:47:42:70:57:1a:cc:a2:45:3f:ab:74:99:
72:f9:e7:d9:41:ba:79:5d:c2:d7:ff:d3:17:8c:26:
e7:9d:2b:f2:a3:6a:76:3d:8b:6e:84:04:1d:e7:4e:
47:97:0f:a5:51:5f:37:6f:9e:84:91:59:1e:98:76:
b1:e9:e3:4f:bc:66:11:35:db:7a:bb:16:af:01:a9:
71:a8:50:4e:7f:67:2a:b1:58:9e:2e:3d:51:34:19:
90:e5:90:33:fd:f4:93:e4:85:4f:84:99:61:ef:83:
35:28:d2:66:db:98:a0:f9:26:97:15:a7:7b:26:f6:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:82:5F:0D:8A:5C:85:4B:63:19:38:4A:C0:A6:A4:FD:A8:45:4A:CB
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d3:4f:cc:01:d6:bc:18:15:2c:f4:24:c3:51:03:2a:a1:5b:
90:52:25:99:e5:67:9d:ca:0d:df:83:45:4d:96:18:7d:05:b1:
66:e0:2e:c6:95:e5:b5:ed:09:1f:69:66:f9:10:fe:e6:3b:c9:
21:3b:f1:3c:24:dd:c9:d7:7e:0a:1d:9a:73:f8:b2:43:ab:ab:
8b:a7:7f:e2:af:9b:58:ca:62:4f:c1:45:87:4e:0b:3d:8b:2d:
96:22:bf:f7:11:66:7f:af:c2:f4:2d:32:1b:d3:d5:ab:e7:86:
9a:53:3b:42:2f:8e:d7:9d:76:3a:6d:2d:4d:d3:d5:22:e6:3d:
ac:1f:6e:7c:cc:f3:ad:50:f2:d6:2a:ac:c8:24:21:1e:85:c2:
9e:85:68:bf:4e:22:9a:c7:3e:2c:a1:6d:fd:74:90:a0:da:f9:
b4:37:32:c7:b5:56:39:81:88:5f:6f:c3:2d:d7:dc:c5:40:86:
b3:b8:db:b8:a7:ac:53:f9:95:07:e5:f0:67:c3:19:e6:48:42:
0f:79:34:b3:5b:5d:7e:4d:09:ce:f6:96:bd:e4:8a:7c:91:de:
43:ef:c6:85:be:9d:94:e4:b5:e7:79:62:a7:59:d4:88:fe:75:
36:85:7e:1b:8b:86:bd:dd:8e:ce:2d:3c:53:a1:4d:ba:ea:19:
74:5a:db:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:43 2025 by rpki-client