Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: MzVA9afCKe4bSDfsMVQpcacMegfBWuMr3kKz+xEZFuA=
Subject key identifier: 19:8A:90:96:BA:AE:E0:4A:9D:7D:A2:C5:3F:34:5C:12:88:13:4B:A4
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 0199345BE18CC614C185C912F4852AE6A5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 16:01:00 +0000
Manifest this update: Wed 10 Sep 2025 16:01:00 +0000
Manifest next update: Thu 11 Sep 2025 16:01:00 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 6ZWMuwQVZa+fCV3XChZqpXAXY1hZHjeV+SXW8tAKjFM=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:e1:8c:c6:14:c1:85:c9:12:f4:85:2a:e6:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Sep 10 16:01:00 2025 GMT
Not After : Sep 11 16:01:00 2025 GMT
Subject: CN=198a9096baaee04a9d7da2c53f345c1288134ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:1b:4b:29:9c:8a:84:fa:26:de:74:59:9a:
d1:38:5a:d0:e8:8b:5c:02:a0:d2:5a:12:64:b5:7e:
a7:25:9d:b5:96:7d:e8:dc:d1:e9:0e:7e:fb:ef:56:
71:34:cb:48:9b:ed:2f:c1:75:1c:47:ef:86:c6:9b:
d0:71:e9:bb:84:f1:12:ac:af:16:48:19:bc:b0:ee:
a4:4c:4d:bb:b8:0b:18:32:cd:c9:d7:bd:95:74:35:
f1:c7:b9:37:5c:95:23:04:4c:24:ae:dc:f4:cd:4f:
6a:7a:15:ed:38:2a:4d:e8:f9:27:d4:92:4c:47:f6:
a2:57:1b:39:e3:36:06:2e:71:57:75:7e:fb:9b:e9:
57:d3:33:bd:af:08:82:22:e8:79:a8:0f:8e:35:39:
c5:63:99:67:a3:94:a6:5e:c5:2b:52:44:f4:76:ce:
45:e4:67:21:2b:52:1e:4c:84:cd:1c:b0:10:a0:3e:
77:ff:40:8b:83:32:da:98:9f:6e:5e:4b:9b:c4:82:
74:a9:37:bc:51:c2:61:a7:2e:d9:c3:a3:11:61:9e:
13:35:e1:86:bc:58:e5:d5:6d:28:a1:09:c9:0e:7f:
03:b5:8b:0a:94:6a:81:21:73:f2:4a:84:62:8c:4e:
74:e8:48:cf:59:ec:1d:fc:de:85:b1:4a:bb:f5:f8:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8A:90:96:BA:AE:E0:4A:9D:7D:A2:C5:3F:34:5C:12:88:13:4B:A4
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:c4:13:ff:6c:bc:13:d3:ff:ac:de:c7:9f:36:b0:e3:64:
b9:4c:2b:7d:ab:0d:49:2d:3a:c9:0e:71:00:49:50:af:53:7e:
53:4e:b5:60:83:1f:b4:40:f0:57:57:4c:55:75:90:de:75:bd:
20:cd:a8:de:17:12:76:25:72:7f:18:2a:51:1b:60:c2:2c:5b:
1f:5b:d7:dc:7f:e5:7d:1b:be:99:fc:80:0c:99:e2:f7:66:ee:
d7:e2:28:69:3b:9c:74:ec:23:9b:a4:44:63:65:65:89:a4:25:
7c:c4:c2:ac:6e:55:15:da:ab:ee:87:49:ba:84:e1:95:82:97:
80:5f:25:c0:d1:57:b4:3e:85:4a:6b:fe:30:c9:5d:54:2a:d2:
a4:00:a1:ff:73:ea:be:ce:f7:c2:cc:6e:a0:f0:d5:f6:33:d5:
30:bd:f2:f0:70:36:5f:72:ad:d2:c3:0f:da:92:d4:f0:33:c2:
de:ab:4d:de:d6:fa:1d:d0:fb:e3:10:fa:27:67:87:7c:37:4e:
8c:2a:01:57:62:69:47:37:dc:f9:19:d3:89:b3:a5:0b:55:df:
14:08:be:f5:49:bd:d2:6c:9a:cf:e9:8c:d4:04:5e:63:74:5b:
ab:47:5d:17:db:0d:44:55:2c:4c:d7:42:27:85:c7:bf:4d:d2:
ca:21:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:38 2025 by rpki-client