Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: KnsPL3qccgz+iVAxEKaFtWVYDcm1iea2PyptsA82+Qo=
Subject key identifier: A0:57:47:19:9C:E1:C7:D4:0F:3F:17:13:6B:81:50:3A:56:AF:59:54
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 0199337FCCE5D690CC3D64D182C9B8EB5396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 12:00:37 +0000
Manifest this update: Wed 10 Sep 2025 12:00:37 +0000
Manifest next update: Thu 11 Sep 2025 12:00:37 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: yqBCRu/udv7PumGS0j4zPV5ZbjisBIJfkCyNJKU98+0=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:cc:e5:d6:90:cc:3d:64:d1:82:c9:b8:eb:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Sep 10 12:00:37 2025 GMT
Not After : Sep 11 12:00:37 2025 GMT
Subject: CN=a05747199ce1c7d40f3f17136b81503a56af5954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:55:ec:8e:32:ec:9c:72:05:a3:69:20:0c:
82:26:c5:9f:18:28:e9:f3:b6:46:f1:e0:86:b5:a2:
82:3c:cd:8a:5c:34:ba:e2:2b:b9:87:00:b1:31:02:
a3:12:ee:02:b9:56:f3:7d:f3:e5:f2:8a:ef:88:36:
db:21:49:3a:ae:80:c3:ae:0c:21:a9:60:e7:e5:9e:
d0:ec:5a:bd:dc:1b:e1:52:13:bb:db:be:3e:ef:5e:
fb:19:22:b7:09:e8:89:59:5e:fc:56:62:c7:15:d0:
28:20:90:8b:c7:b2:f3:c8:09:ac:0d:ec:bb:bc:32:
a3:9a:c2:b2:48:2b:95:dd:f9:f4:dc:78:48:1b:4f:
dc:c7:28:f6:ef:65:fc:5b:30:c4:3b:51:9f:04:ae:
0a:9c:6e:40:db:f4:45:22:18:b9:32:fe:95:16:7c:
1c:24:15:df:b6:fc:c7:c6:af:45:bc:e3:0d:8f:8e:
d5:87:6c:6a:17:1d:70:41:1a:8b:ec:97:1a:e5:36:
60:b4:5e:6b:7b:95:80:a2:06:14:1b:e3:66:3a:4d:
ce:cc:34:25:3f:40:3f:9b:56:41:68:b2:77:a2:2e:
eb:db:cc:cc:4c:ca:c0:21:4b:8a:1c:3b:f6:1d:3d:
5e:c7:6f:d3:a7:a2:d6:2e:82:a5:7d:ef:54:40:e5:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:47:19:9C:E1:C7:D4:0F:3F:17:13:6B:81:50:3A:56:AF:59:54
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:64:c6:fa:60:b6:1e:a4:d7:e3:db:e9:41:de:12:89:67:5f:
31:73:64:67:72:6c:bb:3a:0e:7f:b7:92:d5:af:17:19:08:1f:
e0:9b:20:2d:d9:07:c5:a1:a6:3d:84:31:6f:38:48:b7:93:ba:
2d:44:f6:a3:b9:f4:cf:35:b4:be:28:36:2e:46:d5:50:85:8b:
5d:19:a2:f6:6a:d7:a0:c9:a3:30:88:7d:37:0a:85:4b:73:b2:
15:ee:eb:88:d3:4f:1a:e0:97:cf:b6:f1:e3:c4:7d:1b:42:a3:
e0:3e:38:34:c6:eb:0b:18:24:a0:1f:d6:26:36:85:60:27:0f:
17:ae:f2:13:ad:33:63:b1:12:91:b5:22:4c:f1:63:17:c9:3a:
9e:e2:10:d3:09:c4:8e:15:6c:fa:e7:fb:c4:ae:cb:67:12:12:
56:92:6d:66:36:10:75:35:27:9d:ea:23:b1:19:c8:e6:75:89:
61:4c:22:41:20:42:fc:7d:3f:17:1b:53:ad:c3:6c:7c:74:93:
e2:9a:19:8d:f7:a6:b6:a6:cc:f4:8d:9b:e5:ff:03:46:3e:e5:
47:34:02:38:e6:f1:62:94:2f:73:bd:93:7b:8e:51:17:cc:1b:
c3:1a:ce:dc:a5:a2:97:70:a7:1c:b5:89:bd:1f:94:79:11:0f:
b0:f3:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:12:54 2025 by rpki-client