Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: cvioxrrIIzw0QEfsEjzQcqSYgdgZhpjiySslLlL65BM=
Subject key identifier: 20:F6:E8:79:2E:B7:E8:83:5B:C4:9F:77:0B:20:B1:7C:3B:39:5E:7C
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0198C97F38881E1DFCFB5E32C34BA1DA6FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1647
Signing time: Wed 20 Aug 2025 22:00:14 +0000
Manifest this update: Wed 20 Aug 2025 22:00:14 +0000
Manifest next update: Thu 21 Aug 2025 22:00:14 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: 7EWtiN5F2bAVJSSLiX/KhJssdwKYwAX+s8zh2uhsA8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:7f:38:88:1e:1d:fc:fb:5e:32:c3:4b:a1:da:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Aug 20 22:00:14 2025 GMT
Not After : Aug 21 22:00:14 2025 GMT
Subject: CN=20f6e8792eb7e8835bc49f770b20b17c3b395e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:c2:92:c8:9e:ea:f4:22:d4:ef:6e:17:8d:
01:50:74:55:6a:90:b5:34:77:6d:a6:73:77:e4:29:
da:c0:a0:b8:a7:77:18:1a:70:a7:38:c4:d7:8c:c8:
cc:10:da:da:fc:d3:4a:06:65:45:6b:59:34:94:2d:
94:60:06:95:ad:1d:42:70:d2:8d:1f:1b:4c:5b:b4:
7c:c4:27:c9:2b:35:d0:e6:2c:47:c7:94:e3:3c:83:
dd:57:80:37:de:21:97:17:b8:70:33:8d:6c:0a:b1:
ef:4a:73:f9:39:16:a6:fe:44:22:f8:3b:db:fd:07:
dd:15:0d:e0:73:19:98:83:51:c6:c3:47:69:6d:3e:
7b:5e:2a:0c:3f:a3:d7:55:32:52:ee:86:58:1a:14:
da:05:9d:5c:06:84:22:cb:bc:0a:90:50:4b:75:9e:
5f:c9:69:76:b7:d0:fc:0e:23:87:b2:df:79:5d:90:
84:99:8c:25:84:be:a6:61:ea:e5:4b:47:5b:a2:0e:
4d:58:ee:f1:39:e9:e4:43:db:03:74:f6:a3:44:9f:
5d:52:0e:c0:7d:e9:ff:43:1b:06:fc:c9:b3:0b:86:
58:c1:87:25:c9:2a:0b:03:1b:25:d9:42:bf:8a:70:
8b:0a:fb:37:65:f6:7b:2f:a2:f7:39:7f:b9:c8:e7:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:E8:79:2E:B7:E8:83:5B:C4:9F:77:0B:20:B1:7C:3B:39:5E:7C
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f9:1b:32:59:73:f9:90:c4:c9:58:6f:32:8a:38:fc:54:1e:
d1:f7:ce:d5:fd:ce:a3:ac:11:7e:18:d1:c0:3f:19:c4:86:9c:
88:c7:ab:32:a0:3e:16:37:3f:c5:dd:b3:05:ee:63:fe:8e:2e:
97:d0:18:c2:85:b4:7f:bf:ef:f1:d7:78:74:5c:bb:7e:db:d6:
0f:48:48:4b:0d:7a:3e:52:5e:b2:ce:b8:7e:e8:41:7b:9a:37:
8a:f5:42:89:b9:e3:d0:a3:33:93:30:eb:18:1d:7e:a3:ca:a5:
fd:9b:bb:2c:6c:2b:08:f2:63:d3:5e:fa:e8:61:0a:1b:dd:ee:
c6:f1:2e:36:94:0f:6f:77:32:35:7c:a0:f7:16:ca:69:28:c6:
11:f0:36:c5:8d:29:5d:dd:da:73:8f:18:96:bc:24:f7:7e:b2:
55:ea:af:38:b7:e3:d2:09:37:b5:cc:ce:ab:c1:2c:48:2d:e6:
61:0c:ca:41:ef:81:f3:4d:3c:71:a3:f1:bd:ab:06:2c:ff:52:
e0:01:6f:0d:73:58:6f:64:f5:21:b1:f4:24:12:56:1f:a8:a7:
3f:d5:87:42:91:7a:13:14:a9:d9:83:e1:d8:4a:42:38:5a:cb:
df:2f:e0:aa:95:7d:d9:8e:41:01:26:ed:75:98:4c:6a:52:60:
bc:1b:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:10:33 2025 by rpki-client