Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: Q9fOXm3lCkbaTB8AS0noWG3pMRywtMJvamYUwVn0ZTg=
Subject key identifier: 95:2B:FE:1C:58:83:59:26:87:9D:0D:F2:12:D5:52:CA:88:78:0E:CC
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 019922C3218444273E85B53DC795D2BFB6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0566
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: sPaW7yLm9bOtQo+9JHvjyZx6B6PRKFeoKLCaZlPolE8=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:21:84:44:27:3e:85:b5:3d:c7:95:d2:bf:b6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=952bfe1c58835926879d0df212d552ca88780ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:ef:07:26:ae:bb:bb:c1:93:b5:9e:a0:a7:
71:67:e9:30:32:a1:d3:e5:f4:a7:c5:a6:ba:ac:e6:
f2:f4:74:6c:0a:2d:e2:b2:e7:09:56:a8:16:7d:75:
46:a6:f9:bb:a9:d7:e8:bc:68:19:79:80:aa:ab:64:
b9:f0:a3:f3:7c:79:35:9e:79:d0:98:da:3a:7f:a1:
a7:08:1f:23:4c:d5:6e:32:4b:90:bd:aa:e7:68:42:
99:70:c5:dc:27:0c:0d:4f:88:a1:8f:09:1b:2b:d4:
a3:64:2f:24:ef:a4:69:72:88:03:bb:79:47:8b:82:
9b:73:86:7f:b1:7f:db:73:1c:a9:97:45:71:d2:89:
99:98:a4:9c:90:54:b0:c3:4b:11:ce:dd:6b:b9:0c:
f7:90:26:71:df:b9:8e:30:d9:c8:73:69:c3:9e:4a:
57:d1:2c:9e:83:d7:16:51:6a:fe:ce:c6:49:44:23:
e5:c4:0b:ac:37:fa:ef:7a:a9:c2:b2:e2:54:12:f4:
e5:e4:73:85:e2:a0:b8:80:ef:e7:35:9a:00:17:23:
f4:96:a7:4b:1b:31:8a:95:c6:83:67:23:7e:10:40:
8c:50:91:ba:58:31:57:3e:ea:eb:f7:e6:46:6f:9c:
11:1f:12:38:e0:28:3a:aa:f2:20:fd:a3:53:1b:04:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2B:FE:1C:58:83:59:26:87:9D:0D:F2:12:D5:52:CA:88:78:0E:CC
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d6:b2:47:d1:f4:d2:ae:cd:4f:cb:ad:dd:82:49:89:aa:1a:
36:b5:3f:2d:76:41:bd:54:a9:11:0d:07:1c:6a:74:39:a7:4b:
d7:8f:cb:73:f9:f4:53:e9:f8:06:3b:dc:22:c4:13:c3:e1:cf:
3f:68:f2:f1:bc:65:96:4e:e1:de:c4:75:c0:95:c9:e6:a0:a8:
aa:12:ea:12:e3:3d:bb:a5:a4:1f:ae:87:21:72:ae:d1:51:37:
12:25:57:ec:1d:17:19:2c:d5:41:fb:a5:7e:96:52:27:ac:72:
68:1d:15:57:6c:12:79:9b:61:fa:56:f0:d0:ae:e1:01:28:7d:
93:5e:21:19:17:6d:38:08:85:7f:04:8c:56:96:8e:6c:dc:a3:
b4:23:db:4b:ec:a4:91:d6:3a:33:d4:54:94:b4:68:0d:0f:f6:
88:c5:04:d3:1a:c3:98:8f:c6:1d:08:d1:77:4b:90:8f:cc:28:
25:5d:24:7e:44:e5:f8:79:02:e1:c1:ef:02:fd:5f:ba:5d:cd:
f1:65:57:89:2e:f2:e4:36:65:db:b3:fb:16:cc:73:ab:08:f0:
a9:ca:07:d0:0d:60:bc:7a:ab:5e:c0:45:ba:9b:a5:54:38:9d:
47:ab:ce:71:fb:3d:71:48:41:6b:8c:d0:cf:0d:26:74:e6:1c:
4a:cb:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:11 2025 by rpki-client