Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: B0dXnLo+d5mzTUqs98g2Rk7sb6Z7eYulvyCjJwuzMyU=
Subject key identifier: BE:C7:76:D5:6F:53:02:79:DE:A6:B8:42:46:E4:55:46:A5:15:A9:51
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 019923D5B5EF54F27AD182CA67C6482FE998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 11:00:32 +0000
Manifest this update: Sun 07 Sep 2025 11:00:32 +0000
Manifest next update: Mon 08 Sep 2025 11:00:32 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: Eeestn7DdFl3PJAfpbD3ZJr6y/rlTIe+yj465N15oc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b5:ef:54:f2:7a:d1:82:ca:67:c6:48:2f:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Sep 7 11:00:32 2025 GMT
Not After : Sep 8 11:00:32 2025 GMT
Subject: CN=bec776d56f530279dea6b84246e45546a515a951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:d6:1a:28:a0:3e:5d:8a:ad:f6:41:ed:65:
8e:fe:58:36:33:1d:62:0e:b9:e7:f8:a2:28:fe:64:
47:01:21:88:9e:e5:59:49:43:53:75:ac:a0:89:e7:
9c:16:db:74:c9:cb:ef:f8:39:51:9d:be:23:21:1e:
64:23:11:03:94:9c:28:b6:a9:55:a4:96:45:2c:85:
5a:12:94:14:01:7d:67:b3:38:61:9b:09:09:a0:89:
92:20:2f:c5:96:a1:23:a5:74:52:01:5b:a7:55:c0:
52:a9:52:ea:2a:5c:86:7e:8b:ee:37:33:21:89:2b:
76:35:6e:9e:c2:6c:97:fd:d0:f1:b7:8c:68:1c:85:
3a:6a:eb:53:a9:86:6d:ce:9d:a0:d9:d1:0c:7d:20:
b2:6d:78:53:18:6b:f6:9a:f6:e6:a4:00:a4:01:df:
94:8d:82:b3:ac:67:ba:8d:9a:b7:19:2f:c9:6f:dd:
d4:cf:2e:52:5d:da:27:22:fc:a8:f7:4f:41:0d:0a:
72:a1:e8:4a:c0:48:f6:12:3a:13:d7:cd:ae:f5:a1:
01:f9:5d:6c:6b:47:97:70:21:7f:21:e6:ac:32:b3:
a1:76:77:da:c7:6b:9f:99:8a:cb:23:d9:3c:40:ba:
e9:78:55:37:bf:a7:75:e0:14:9a:69:60:a6:62:f2:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:76:D5:6F:53:02:79:DE:A6:B8:42:46:E4:55:46:A5:15:A9:51
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:f5:65:39:c1:da:89:c6:c0:d4:12:10:9f:58:28:04:fb:
69:11:36:09:70:ab:0d:54:9d:cc:ab:20:b9:44:e1:1c:f1:49:
0e:e7:51:55:ab:eb:61:eb:7a:9c:b5:a1:5f:e8:15:9b:f8:7a:
a1:eb:bd:7c:32:e0:27:33:5b:f5:4c:20:ae:40:05:97:91:d7:
1a:c6:72:7b:b2:fd:f3:ed:9e:05:d0:4e:ce:e8:7b:8a:2a:92:
60:f8:22:ff:46:6d:bc:d9:b4:04:b8:76:a8:f3:b4:66:a0:3d:
82:d1:03:5b:eb:61:43:51:cf:58:58:ee:2f:f5:4d:4c:8c:0c:
4b:ec:f9:dc:ba:be:de:d2:57:e4:d1:09:91:12:05:c7:74:e1:
8b:f8:ea:f3:49:b0:46:6f:85:72:d7:7c:32:4a:a0:85:a8:08:
0e:e5:d9:9c:3f:99:ea:25:03:00:a3:b2:23:d1:63:19:61:92:
58:5f:ed:4e:17:61:04:22:74:2d:e1:c1:d3:bb:af:f3:9c:f8:
98:de:bf:93:fc:3d:e3:33:b9:20:28:dc:85:d7:81:cd:a5:4e:
e0:0e:a7:59:98:cd:44:d5:2d:90:0f:de:0f:c1:99:fa:64:35:
3a:82:84:11:4a:79:1e:ba:6b:92:7c:5f:44:6c:20:08:90:8e:
ea:80:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:19 2025 by rpki-client