Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: g/I6Awwbc24/hh2G+5p5jyZ8qiybBGFRm5uwlrpabY8=
Subject key identifier: 3E:DD:FD:2D:41:DC:2A:55:4F:F9:0A:67:EA:1A:85:50:A8:CD:88:2A
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 01993500415DE916AEB622794ACD12DA89D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:00:33 +0000
Manifest this update: Wed 10 Sep 2025 19:00:33 +0000
Manifest next update: Thu 11 Sep 2025 19:00:33 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: cTBuPXvCaI6nky7r0s62UNpnQ+Eimahg4aDstifauuY=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:41:5d:e9:16:ae:b6:22:79:4a:cd:12:da:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Sep 10 19:00:33 2025 GMT
Not After : Sep 11 19:00:33 2025 GMT
Subject: CN=3eddfd2d41dc2a554ff90a67ea1a8550a8cd882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:c5:7b:75:96:16:1c:28:da:f1:0a:1a:99:
7c:66:2c:7c:2b:18:47:df:58:4d:23:ec:d5:b7:d9:
ab:52:99:21:e7:55:2f:be:50:33:9f:62:05:f0:93:
74:b6:01:e0:a5:86:5d:fe:cb:8b:60:a8:0d:c0:82:
d3:a9:c7:9f:91:5e:87:fa:fa:6e:02:01:a7:48:e6:
74:83:94:a7:26:00:a9:22:1b:55:34:5e:55:09:b2:
a0:e3:16:de:98:ab:e9:4e:26:f4:96:e0:44:01:cf:
a4:46:bd:1d:ae:61:86:db:89:fa:37:46:27:5f:21:
ca:3e:63:67:e3:f5:57:5f:27:a4:b7:37:3d:24:92:
85:a8:54:b6:34:5e:47:e9:d4:8f:7a:14:a7:26:22:
b7:34:75:51:43:7d:76:2e:54:67:d8:9d:e3:68:f2:
59:89:a3:46:3c:de:ca:7c:be:7b:27:8f:c0:9d:04:
6b:76:a0:76:45:1c:9a:1a:c9:f4:93:ad:7b:c0:ef:
94:7a:4b:87:39:44:22:c4:6b:f0:31:b1:e1:75:fa:
43:c7:fe:12:1a:10:f8:99:bb:34:19:bf:b6:48:91:
79:f6:f3:35:b6:ec:70:36:f2:91:0a:7a:a1:2b:d4:
26:97:1b:3c:a4:3a:7f:c2:10:86:34:24:50:94:19:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:FD:2D:41:DC:2A:55:4F:F9:0A:67:EA:1A:85:50:A8:CD:88:2A
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:47:03:90:69:5c:11:e5:70:08:69:a1:11:21:b2:11:3f:
59:2c:ce:1f:03:2d:3d:61:c1:e9:ed:e5:89:0c:84:81:06:77:
49:f5:10:e5:cf:c4:84:07:59:0a:d0:c5:88:d2:19:65:67:1c:
6b:64:97:1b:aa:3b:b3:b9:c0:1e:20:ff:57:5f:f6:d1:25:64:
7d:f2:7d:6a:d0:84:ce:60:55:b6:36:7b:c9:42:08:4f:b1:61:
67:05:26:19:a2:31:05:7f:c0:15:af:6c:70:f2:a7:53:bf:7b:
1d:66:da:cd:f7:df:56:dd:3c:07:db:0e:30:c0:54:3c:09:d1:
3e:d8:66:b2:81:22:50:12:e2:bd:0b:86:ea:75:ae:11:c1:cf:
f7:3d:75:a2:30:2e:0e:d9:04:6e:81:d9:58:23:6b:75:42:93:
e6:2b:94:19:41:f2:74:c5:de:b7:44:e5:ca:44:76:f9:c8:97:
03:8b:3a:ff:45:ac:e6:dd:1d:bc:6b:03:61:e6:bc:3d:b7:0a:
a1:52:de:f6:ee:fa:d5:7f:64:9e:87:05:e7:85:c6:b7:c1:48:
24:30:b2:87:13:32:98:52:c0:a9:0c:bb:9c:49:a8:ef:51:74:
0c:6c:88:10:7c:b9:b8:26:d8:b8:77:04:be:62:f0:d7:ee:d8:
71:34:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:37:49 2025 by rpki-client