Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: XA7RnSxaSWY+f7E+bJnimhAeFdfqwF+vS/MMlm7pNPk=
Subject key identifier: F5:09:D7:A8:76:1E:8C:A6:07:0B:33:FE:7C:DD:2A:13:17:C3:7E:55
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 0199161B287ADBEB2E29ED2C4FC025038220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 19:01:42 +0000
Manifest this update: Thu 04 Sep 2025 19:01:42 +0000
Manifest next update: Fri 05 Sep 2025 19:01:42 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: S3sdaCeqoOXW19GZ1hxM//tcnNTayu3ksrATsqOhBH8=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:28:7a:db:eb:2e:29:ed:2c:4f:c0:25:03:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Sep 4 19:01:42 2025 GMT
Not After : Sep 5 19:01:42 2025 GMT
Subject: CN=f509d7a8761e8ca6070b33fe7cdd2a1317c37e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:68:75:ec:bc:00:c7:ea:da:b5:9f:7e:c6:
cd:f6:ca:76:19:8e:0d:cd:68:33:03:da:93:33:a8:
61:fc:e9:12:ef:00:4a:e1:98:80:5c:7f:9e:46:27:
5c:85:47:2f:c8:8f:5d:7e:38:03:e5:2f:a9:5c:dd:
82:27:7f:32:8a:d3:7a:d1:3a:65:48:0f:69:ef:d7:
c2:d2:c0:0b:ca:55:a3:b9:76:9a:8c:14:6a:cb:00:
e1:3a:18:6a:03:82:62:2d:89:77:5c:46:41:46:16:
16:8c:9d:b1:03:09:89:2a:75:9f:ff:f8:a8:99:83:
96:f1:82:54:fc:ad:ca:d3:fa:95:64:19:45:50:34:
d0:32:c0:06:78:cf:f0:6b:f1:b9:1e:6e:19:78:27:
c4:b9:bb:87:e3:1a:23:a0:62:d0:61:d9:3e:4a:88:
90:a2:59:03:bd:ab:bb:d7:1b:19:a8:e6:ad:bf:50:
11:a6:7b:a9:d8:9f:2d:40:7a:c0:b7:77:cc:5e:f1:
d6:7c:d2:e9:6f:d0:f0:c0:1c:2b:59:d8:3f:1e:1a:
29:81:c7:be:f2:ad:7d:87:04:bd:76:0d:ae:65:69:
4a:a4:bc:96:1e:0e:9f:70:b1:07:d3:09:79:c8:dc:
65:eb:91:2d:d2:b0:39:4b:c9:9b:92:84:95:9c:28:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:D7:A8:76:1E:8C:A6:07:0B:33:FE:7C:DD:2A:13:17:C3:7E:55
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ea:bf:5a:1f:aa:af:6a:3e:b2:eb:bc:d8:b3:da:fd:72:b1:
ab:52:cf:ed:c1:31:c2:bc:e6:3b:63:1f:6b:b6:41:e1:c4:eb:
58:80:13:cb:5c:75:d1:70:3e:2b:cb:29:b2:d1:b8:e6:3c:e9:
ee:4c:6b:c3:8b:00:9b:7f:31:fd:da:da:cb:4a:f2:48:65:87:
12:e4:fa:41:db:29:3a:ac:97:69:32:51:d7:de:8c:43:c8:32:
51:51:7e:b4:d5:fe:94:06:95:d8:b9:a1:4b:dd:56:51:9f:4b:
ce:0b:19:c2:de:ee:63:2b:cd:86:9d:5f:2e:1c:d9:da:c5:fc:
86:18:c3:41:ea:02:38:98:fd:76:43:14:54:c0:e4:f5:31:d0:
cc:c3:f3:db:0a:c6:a3:2f:e4:af:25:0a:26:05:03:73:4d:d3:
ed:ba:ff:b6:e1:79:86:6f:e1:dd:24:1d:62:7c:26:d4:a4:f4:
d1:09:cc:48:8b:4c:6a:32:78:42:b5:44:3b:21:95:fb:fe:8d:
90:45:dc:eb:15:bb:6a:8b:34:7e:23:ce:f2:e4:65:8a:85:ea:
31:88:d8:9a:69:63:6b:b4:5f:89:f9:43:2f:fa:13:fa:84:d9:
d0:78:c8:5e:4c:d1:24:ab:f0:98:2f:11:3f:f3:08:8f:56:e6:
d0:20:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:25 2025 by rpki-client