Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: 9JMdtRC89HucYT8+3bUAFt7SO/W+6bpEpweA1yP67iE=
Subject key identifier: 89:A6:E8:16:C3:E9:82:94:A4:7B:52:A6:9E:3A:9C:C8:04:F4:8C:B6
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0199345BD2FAFE17EF351F45E2B7FD53C3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 16:00:56 +0000
Manifest this update: Wed 10 Sep 2025 16:00:56 +0000
Manifest next update: Thu 11 Sep 2025 16:00:56 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: nNHws2XqWmxCp8UwOYhYttcXCFSToe8kLrCQW25fRC0=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:d2:fa:fe:17:ef:35:1f:45:e2:b7:fd:53:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Sep 10 16:00:56 2025 GMT
Not After : Sep 11 16:00:56 2025 GMT
Subject: CN=89a6e816c3e98294a47b52a69e3a9cc804f48cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:47:2c:ef:c3:4c:8c:e4:64:8b:60:d6:d8:
e0:0d:9a:29:f8:72:66:cf:91:78:38:51:ce:a8:9e:
d2:eb:61:74:30:5b:41:dc:25:0d:24:e5:af:f3:3e:
d4:76:8d:57:a3:2b:93:35:82:a0:28:df:e3:3b:02:
4e:20:a8:ce:d6:f6:c6:ab:3e:19:57:55:08:c5:5c:
f6:26:c4:3a:91:34:46:c9:e2:46:cc:f1:bc:c4:53:
0f:ca:b0:18:58:b8:87:b8:55:71:50:23:02:b8:1c:
8d:f1:09:23:0a:fd:93:fd:79:05:3d:67:fa:be:61:
4e:87:c8:c9:95:4f:42:02:dd:53:c9:f9:44:4a:21:
eb:e3:78:5b:90:6c:a0:d9:f3:73:2f:62:65:8e:57:
cb:df:43:d3:9e:39:14:4a:03:6d:3f:3a:6d:b6:56:
a5:5a:4d:0e:46:2e:93:3e:ce:6c:28:73:56:3b:0e:
01:74:64:9f:3b:fc:8f:8d:6d:34:0a:e9:49:57:34:
70:df:eb:25:ab:4f:19:6a:d7:e6:b4:4b:06:ca:fb:
49:fd:2b:19:ba:6d:bc:34:fc:23:6c:b5:02:80:61:
a7:6b:aa:3e:5a:59:e5:15:b6:11:e9:91:c9:c1:2f:
16:c7:86:7f:6f:01:bf:f1:a9:1a:0f:bc:3c:af:4c:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:E8:16:C3:E9:82:94:A4:7B:52:A6:9E:3A:9C:C8:04:F4:8C:B6
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:ae:e8:65:53:da:86:b3:97:42:20:81:b6:78:ca:66:f3:
49:40:ed:d7:80:ec:a9:ac:b8:46:89:51:9d:ed:b5:01:38:75:
9b:de:e6:1f:f0:8f:8a:a4:b7:2a:69:57:7d:5a:dd:02:e3:ed:
2a:a4:43:13:48:52:29:fc:07:1c:ea:dd:4b:84:ad:db:07:15:
b6:f1:15:28:65:15:0a:6e:92:ea:ad:2c:a9:77:cd:87:3a:f0:
5e:c6:44:c1:4b:44:e1:d0:42:54:de:23:93:75:fe:e0:0b:c4:
b9:e4:0e:b9:42:e4:95:ba:b4:a9:39:c7:1f:96:62:fc:2b:ea:
e6:98:9a:32:ca:49:a1:83:ee:3a:64:bf:a5:a9:b6:33:cb:0f:
28:c9:76:78:4f:e9:c9:40:2a:88:45:ea:e5:96:e9:7f:b4:83:
c8:52:9f:0d:92:aa:44:8c:94:75:ce:23:5c:bf:18:59:85:53:
1c:31:27:1a:b0:fe:8b:50:17:d6:7b:21:9f:e4:e7:3e:35:d7:
1c:6e:4e:ec:4a:98:c0:c9:c6:96:5a:80:33:ce:82:41:e3:e6:
d7:d8:2c:6e:d0:a9:04:38:f6:83:4d:af:e0:46:2b:d1:21:4b:
ed:9f:15:10:b7:6b:ed:46:c3:44:fb:7d:51:b0:8f:83:58:21:
7c:c1:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:26:30 2025 by rpki-client