Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: dOAer6WQSulT4ZoXrG9eJ3M5A+WBGKvYTegYVIRfPng=
Subject key identifier: 2A:D1:B4:DC:8E:0B:70:85:B2:C8:62:71:82:22:BC:FB:2B:D6:3B:C9
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019938704AB8FE1525280F6A2A237EBB02E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 11:01:47 +0000
Manifest this update: Thu 11 Sep 2025 11:01:47 +0000
Manifest next update: Fri 12 Sep 2025 11:01:47 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: QS3iWTEI57lqEGKqWpqpSHOnjlbqCibFlzA/jhXp6b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:4a:b8:fe:15:25:28:0f:6a:2a:23:7e:bb:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Sep 11 11:01:47 2025 GMT
Not After : Sep 12 11:01:47 2025 GMT
Subject: CN=2ad1b4dc8e0b7085b2c862718222bcfb2bd63bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:89:81:1d:bc:ed:fc:08:cc:37:60:2a:96:
95:0d:66:b0:8f:e8:76:dd:d6:2e:45:dc:c4:bb:48:
d3:d1:35:b0:1e:b9:9c:d3:95:5d:83:93:6c:d2:0a:
9a:da:25:f8:f1:fd:42:a9:03:cb:3b:d8:db:c0:d4:
0e:88:4a:22:a4:37:68:92:fa:67:c5:f5:b5:a3:ef:
7f:d8:2b:ca:72:a5:fe:49:3f:9e:c9:3a:44:b8:98:
65:dd:91:a6:c1:d3:b3:cb:7e:b9:70:30:4f:e1:0e:
f1:2f:6b:4d:97:92:53:6a:39:4b:e2:8c:4b:54:f8:
ed:06:16:a0:97:fa:e6:fc:fa:76:36:10:d1:03:81:
98:d0:ee:66:2a:ab:d4:86:29:73:61:4e:71:55:5c:
ea:d4:5d:98:1f:5c:9e:b9:cc:a4:94:b0:45:0c:8d:
a8:0b:35:3c:8d:56:54:22:e2:17:a4:08:4d:a6:73:
ee:d5:3b:b3:be:05:7c:3c:77:2a:d4:e5:54:75:3e:
ab:86:97:64:83:54:8c:09:d6:39:d3:fc:36:f5:61:
fc:af:94:78:0c:5d:dd:46:08:c4:9f:56:de:98:1b:
66:c4:2e:70:94:aa:51:3c:48:73:cf:6e:f1:62:e3:
cc:54:f8:66:38:af:01:49:98:68:98:4a:28:60:b3:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:B4:DC:8E:0B:70:85:B2:C8:62:71:82:22:BC:FB:2B:D6:3B:C9
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:c4:7b:27:70:2b:4c:90:99:e2:df:e8:73:2d:00:03:5b:
38:5a:b9:b4:8d:47:34:ba:31:ef:6e:5c:4b:4a:95:59:ba:4e:
61:73:a3:44:df:25:86:b0:d3:16:98:39:2c:ee:ad:cf:6e:f8:
29:be:50:96:eb:bc:20:3a:87:6c:57:b9:af:38:6d:1a:ef:6d:
c0:bc:ff:49:b4:a5:ab:62:45:36:a0:56:80:7e:a7:aa:58:45:
fd:46:87:70:b5:06:d8:15:f9:b6:73:a5:4b:98:d5:6c:83:ac:
df:01:f1:da:46:1a:3b:35:71:a8:65:d1:c4:75:22:2c:4e:5d:
7d:8e:1f:c1:8e:05:cc:72:37:69:0f:28:d4:7b:9e:21:a3:ae:
a7:e0:70:4a:11:9a:eb:19:8e:8a:5d:6d:73:05:60:8a:7c:8c:
60:7c:ea:9e:12:29:5a:2c:b9:7b:d0:3c:6a:e4:fa:9b:73:18:
29:97:f3:da:db:bc:1d:31:83:81:4b:fa:bc:09:86:ba:40:e1:
62:a4:06:06:f9:9f:df:de:c9:87:19:8a:b4:c6:b9:d7:54:20:
f8:49:19:ae:33:07:80:72:ea:1f:88:db:51:8c:e1:e2:11:0d:
f6:4f:60:3b:d7:aa:3c:79:e9:e4:de:a7:c1:41:e1:4b:7d:99:
23:7c:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:53:13 2025 by rpki-client