Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: A0d55yFvA5Jki1tPn3CCeNKZ89pd7lsAb3P5s2cC9qQ=
Subject key identifier: 25:92:DD:0F:8D:68:99:CC:38:4C:9F:CB:68:96:0D:EB:61:91:B6:13
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019951548849EF57CF591A66FF8F6DB7970B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 166E
Signing time: Tue 16 Sep 2025 07:01:58 +0000
Manifest this update: Tue 16 Sep 2025 07:01:58 +0000
Manifest next update: Wed 17 Sep 2025 07:01:58 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: NIAwaHLr7sAfkJjhBE/EL1O9cOefkdTdLCpujaiQb04=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:54:88:49:ef:57:cf:59:1a:66:ff:8f:6d:b7:97:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Sep 16 07:01:58 2025 GMT
Not After : Sep 17 07:01:58 2025 GMT
Subject: CN=2592dd0f8d6899cc384c9fcb68960deb6191b613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:6c:a8:de:b4:f7:7d:81:98:c7:1f:f9:ec:
65:a4:e9:9f:96:4c:be:69:39:34:e9:ae:5b:ae:4d:
a2:b0:2f:82:ff:7a:4a:e5:1f:ea:26:8b:76:39:c6:
97:23:92:13:27:22:f0:12:e8:78:0d:20:63:de:76:
15:fc:d5:86:e9:80:8f:e5:83:15:cc:a2:42:e7:31:
6e:b7:98:b2:d0:3f:7b:1b:ee:a2:1f:8d:36:ca:6d:
46:b0:0e:1f:c4:d6:f9:f0:e4:d5:23:4b:49:ba:cf:
53:e7:a1:62:f1:82:fd:4c:50:21:a5:3a:66:d8:99:
6f:cd:e7:0a:14:3c:e2:76:98:1f:a9:73:e2:18:1c:
e1:76:c0:0c:b1:99:21:8e:09:4e:e3:d7:80:24:b1:
23:2a:44:29:15:86:ec:c2:95:68:23:09:70:da:0a:
27:ef:e4:a4:f1:d1:fd:fc:8c:be:4f:11:0d:34:17:
24:34:2e:8c:2f:de:7a:2a:71:c5:d5:dd:d7:7d:a1:
2e:0e:38:24:8e:b2:6b:5f:14:fb:e4:58:75:7f:a7:
c4:9b:3f:cd:10:fa:34:3c:39:24:e1:21:da:d7:14:
1e:a2:81:22:c8:7b:7a:a8:77:c4:5b:56:ec:f9:e3:
50:7c:98:a7:d1:8c:59:6f:26:ac:bd:62:f8:18:56:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:DD:0F:8D:68:99:CC:38:4C:9F:CB:68:96:0D:EB:61:91:B6:13
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:45:2a:3e:dd:83:37:05:15:cc:ff:fd:b7:1b:5f:56:65:
e1:aa:ea:fe:15:df:9e:19:a4:79:53:34:5a:b6:c1:13:f6:c6:
41:79:c9:26:88:10:cc:6e:50:88:68:ed:8f:76:b2:f5:db:19:
e2:ec:ca:11:6a:5f:f8:ba:87:06:58:31:e6:26:43:c1:94:ea:
0b:7c:bd:22:33:ef:1d:41:39:25:ba:38:6c:bf:2b:b0:f1:55:
33:97:87:26:39:5a:73:47:fb:ca:14:29:1c:0b:4f:33:af:e2:
42:e2:6b:12:6f:1c:de:d4:f4:f6:b1:75:48:d9:55:f1:85:44:
cf:a1:65:cf:a5:61:95:ec:93:da:51:fd:c3:45:e2:77:47:60:
86:99:81:4c:2c:cb:9e:1b:1f:e7:3b:1f:df:c5:a1:b0:af:c0:
ae:85:cd:88:21:9b:7a:88:23:54:eb:40:fe:9c:8e:e4:ce:7b:
de:70:5d:c4:85:4a:ad:72:15:48:71:e7:06:ce:63:9e:be:4d:
33:b0:54:33:64:ac:e6:01:8e:2d:51:d8:13:0c:b1:d3:07:01:
76:8b:09:7d:8e:60:a0:f8:04:a4:1f:2b:3b:10:aa:ef:ff:8a:
10:56:ee:8a:18:4a:bc:35:82:0d:2c:2f:82:9c:f1:d7:00:bf:
f0:26:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:02:38 2025 by rpki-client