Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: fydJwO06dyuBXsU1Uh4+64oZ6I+rHxK8EzbuvjCBtdM=
Subject key identifier: A9:54:EA:96:A0:1D:DB:0D:28:13:01:3D:A1:43:CF:3F:88:8F:3E:5C
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019921B0CE196604FA7AB6BF281BDDC81A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:00:59 +0000
Manifest this update: Sun 07 Sep 2025 01:00:59 +0000
Manifest next update: Mon 08 Sep 2025 01:00:59 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: aBrWNAEjRoUFu1gghRqfABQP7ZE2vv7gqnEH9aoERiA=)
2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ce:19:66:04:fa:7a:b6:bf:28:1b:dd:c8:1a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Sep 7 01:00:59 2025 GMT
Not After : Sep 8 01:00:59 2025 GMT
Subject: CN=a954ea96a01ddb0d2813013da143cf3f888f3e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:a1:2c:82:ea:94:a7:7a:dc:cd:08:1b:9a:
4e:7f:9b:52:00:c7:5a:e1:83:af:c6:be:79:8c:e4:
dc:6f:f5:ff:65:44:9c:de:cc:83:a6:9a:54:c3:d2:
4f:ba:3e:c3:46:90:fc:cd:6b:20:c2:39:e1:38:5d:
4a:5d:44:b8:2e:d8:c4:a8:25:e9:a8:2d:a6:98:4e:
8a:43:47:6d:72:a5:8d:1e:4b:9e:fe:11:41:db:7d:
0c:99:b6:95:68:3b:95:56:72:e3:9b:04:a1:ac:69:
88:ed:12:66:ff:27:75:38:73:25:13:28:59:08:5a:
16:30:22:bc:a4:41:10:21:6f:3b:d6:e1:0c:2f:78:
45:fc:09:f6:89:fa:7d:0d:08:b3:01:3c:e4:2c:a0:
f1:1b:70:80:aa:f1:e7:7d:52:8e:8b:cb:04:24:c4:
6f:e7:89:44:90:7a:00:a0:1e:35:e9:e2:30:bb:c8:
32:ec:46:1f:42:8c:1e:ee:10:1b:24:25:7b:df:8d:
26:fc:7e:c9:70:01:95:70:79:44:f5:89:cf:dd:64:
36:51:1f:ed:6b:f7:08:06:97:05:2a:af:1f:f2:2f:
b0:f6:20:99:79:8d:e0:e0:90:cf:ec:da:53:37:f7:
4a:82:2e:0e:ce:53:75:e9:79:6a:74:16:d8:de:41:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:EA:96:A0:1D:DB:0D:28:13:01:3D:A1:43:CF:3F:88:8F:3E:5C
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5f:07:7d:e3:6e:d5:14:14:d6:e4:ca:e9:dd:82:09:57:40:
fd:7a:0f:ca:c6:a7:d5:b2:48:94:90:ff:6e:49:d9:f6:fc:f8:
68:4e:a0:93:0c:b6:f5:5a:9a:44:16:a6:e3:2a:2f:93:6a:69:
39:58:3f:25:cf:b5:d2:de:3b:b1:00:85:0f:47:4b:3b:ff:c9:
a1:14:dd:3f:10:d6:16:bc:62:45:0d:41:b2:b3:31:b2:3f:82:
f2:bf:8a:6b:19:c1:47:94:db:4e:53:86:f3:d3:c4:02:8a:0d:
a8:5c:98:bc:b3:17:fe:25:58:9c:10:f5:5d:63:84:f8:f8:b3:
66:1a:94:ce:60:3b:94:7d:3c:0e:4a:a1:15:8e:6b:91:92:87:
4e:66:43:3d:72:dc:db:4f:ee:98:8c:1a:4a:d9:56:4e:02:fa:
0f:ee:bd:9d:a1:bb:fc:72:60:e3:0e:da:19:82:48:96:e5:0c:
74:82:bb:48:e4:60:dc:da:da:81:f3:35:f4:7e:aa:34:b7:c5:
7d:bc:89:12:78:28:76:74:38:4b:8f:2d:82:30:32:a9:2b:4f:
eb:bb:57:d9:53:2d:2c:8b:bc:c0:11:ac:51:74:6f:16:f1:21:
ee:74:1a:c6:b5:03:a8:ad:7a:cc:51:df:10:a5:62:dd:40:b7:
c7:b2:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:06 2025 by rpki-client