Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier: YWzeIE9dVgKn9dtXicfzA7+pCNDJhCG2fjOKM5fx860=
Subject key identifier: E1:F2:4C:31:60:B9:3A:2A:B5:C5:90:C9:46:21:48:1D:7F:20:7C:6D
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 019859EB5E8C13E0A65BA627904DD543505A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 06:00:54 +0000
Manifest this update: Wed 30 Jul 2025 06:00:54 +0000
Manifest next update: Thu 31 Jul 2025 06:00:54 +0000
Files and hashes: 1: mCm-KBIMQ6gtgsW9oEUxZqdGcRM.roa (hash: ItOlCehgUekOH/ud/IMp3e9dVCyKMOt54wV1YDUzoCg=)
2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: SPf1hIn3o5aAMTJZ3ztYeSA94/+n8yl8NtA+y/aA5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:eb:5e:8c:13:e0:a6:5b:a6:27:90:4d:d5:43:50:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Jul 30 06:00:54 2025 GMT
Not After : Jul 31 06:00:54 2025 GMT
Subject: CN=e1f24c3160b93a2ab5c590c94621481d7f207c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:1e:38:55:10:04:36:25:8e:5e:bd:3c:86:
2a:d8:f4:8a:22:8f:2d:44:f5:a4:64:55:5e:85:15:
58:5d:f2:f6:a3:7d:e5:36:59:5c:86:97:50:dc:63:
10:df:3e:69:da:5f:d6:f3:32:0b:d1:6e:c2:75:bb:
72:33:78:aa:53:d3:64:b2:69:97:8a:a7:8d:e9:9c:
a0:b0:e3:49:62:05:b0:18:3c:3d:06:2f:47:73:c6:
ed:b0:46:94:f8:5b:09:75:f2:ce:e4:12:1c:89:46:
73:7f:75:e7:cf:73:74:f9:33:4a:a7:31:15:34:d8:
71:a5:fa:bd:74:96:39:ac:17:5c:cb:98:b0:3d:8e:
f5:bf:75:6a:cc:a5:6e:62:c5:4c:cb:db:ba:98:16:
52:09:34:11:38:e0:2d:18:a6:35:d7:76:73:88:3d:
9e:3a:39:8e:13:3f:6f:cd:14:cb:48:f5:13:fd:9e:
f4:26:0c:cf:12:86:cd:c7:60:16:85:a9:a5:9d:9a:
9d:06:c6:f6:8f:e0:f6:4d:63:e4:f8:6d:38:23:89:
96:9d:ea:53:11:0f:99:43:6e:c4:08:2f:f1:15:18:
9c:70:44:4c:1a:c8:4e:ee:78:c8:de:4c:72:72:0e:
2e:ee:0b:4a:33:dd:ab:c3:17:f0:8a:eb:af:bc:8f:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:4C:31:60:B9:3A:2A:B5:C5:90:C9:46:21:48:1D:7F:20:7C:6D
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:1f:fe:ff:29:c9:4b:45:0d:08:ea:dc:ef:63:4a:e4:2e:
ff:02:4e:7d:85:c9:a9:d4:70:d5:08:1c:16:51:a0:42:4d:43:
5c:1c:ee:20:43:44:49:a5:51:dc:0e:8c:ed:fc:50:7e:6a:a3:
3b:d2:7a:ac:13:84:0c:35:61:d5:2b:77:6f:be:2a:01:43:2c:
0c:7d:eb:f0:60:79:22:71:4d:24:06:6f:a7:9c:51:a7:f9:f5:
b0:ea:81:e5:07:eb:d6:70:5c:52:18:2a:4c:6c:96:09:75:6e:
88:0b:d2:6a:b4:3a:c5:3f:f5:a3:b3:0d:a2:0b:49:00:97:fd:
ae:a9:71:6f:d8:19:b8:eb:c8:2f:a1:11:a8:38:d2:2b:47:7b:
06:cf:4d:d1:30:d0:31:cb:f7:46:32:c8:13:f7:a9:c0:2d:00:
af:5a:e7:10:0d:db:5b:d8:32:4d:f9:f8:2f:3a:d4:d2:fc:63:
18:e9:65:07:c6:5a:9e:fc:80:54:e4:58:46:87:9b:41:37:60:
ad:8a:76:30:18:f8:87:dd:d1:57:ec:f4:b2:83:45:54:a9:dd:
79:bc:7b:fe:79:5d:f0:84:c3:10:61:f0:83:b1:f8:09:3e:01:
75:3b:d5:44:2f:56:62:55:a2:51:ec:a0:c9:13:2a:f0:3a:af:
5a:61:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:50:31 2025 by rpki-client