Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: ETQKJZHpsKmoxUub3gONCo4olzdulp8otigkIMt/bok=
Subject key identifier: F9:3D:DA:69:56:3F:00:71:84:05:72:73:D1:D7:6A:7B:0F:74:A1:FF
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 01993839347350362E456463EE622DED350A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 10:01:36 +0000
Manifest this update: Thu 11 Sep 2025 10:01:36 +0000
Manifest next update: Fri 12 Sep 2025 10:01:36 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: 0f5sXylysVT1MMZ2ExTYcmu6av45K/UIH9pVuM+WfwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:34:73:50:36:2e:45:64:63:ee:62:2d:ed:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Sep 11 10:01:36 2025 GMT
Not After : Sep 12 10:01:36 2025 GMT
Subject: CN=f93dda69563f007184057273d1d76a7b0f74a1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:76:0f:69:49:fa:dc:ba:e5:1a:15:4f:dc:
12:13:43:7c:9a:28:38:4e:62:51:9b:c6:f6:24:97:
49:33:0e:53:2b:c5:d9:25:17:f7:c0:2e:d3:2b:fa:
55:80:b3:e2:76:2b:d7:5c:ce:a4:f8:33:7a:a2:93:
81:5b:cd:74:5d:9a:35:55:b9:b2:89:5b:e7:7d:dd:
69:9f:6f:bc:cd:d1:74:18:e9:4b:ea:56:57:45:a1:
bd:f9:bf:be:b9:8a:47:ee:c6:f4:7b:39:b9:bb:89:
d6:d9:27:e8:a0:d8:e2:39:3f:49:7b:1d:ba:5d:ef:
8e:02:92:58:91:c6:05:8f:dc:c5:fb:89:ad:ba:22:
a9:eb:65:b1:ae:72:2a:0e:fa:fe:e4:9d:f1:d3:df:
b8:c8:f8:02:53:ae:00:60:8b:81:ec:41:1d:82:02:
44:9f:95:31:06:51:2d:8b:14:85:5e:aa:9a:9d:f1:
76:0a:11:9a:45:71:75:2b:d5:0b:5b:b2:d4:11:e3:
6f:b9:b4:44:96:15:01:75:c7:df:26:a6:c0:62:9b:
3d:49:5c:03:19:75:90:b7:f3:16:00:5e:65:e6:71:
45:b7:fd:37:b8:45:e5:e7:35:7e:73:14:6f:3e:bc:
2a:dd:0f:52:d0:da:09:a1:5a:76:9b:47:4f:29:ff:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:DA:69:56:3F:00:71:84:05:72:73:D1:D7:6A:7B:0F:74:A1:FF
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:54:75:8c:e9:e3:2a:eb:55:84:cb:5e:47:e4:bd:9d:42:
8c:9b:92:3a:42:30:f6:6e:a0:6a:b7:7e:f8:fa:49:b7:2e:cc:
ec:36:89:af:ae:0d:a2:7b:f7:32:ba:c4:18:9b:9a:59:ff:cd:
82:ba:ad:9a:a7:8a:60:00:90:a0:24:68:bd:5c:03:01:42:06:
a5:54:78:74:6b:ca:84:1f:47:b5:8d:3c:ee:45:6c:7f:be:c3:
81:71:d4:50:b0:25:92:8d:6b:dd:56:8c:da:10:87:dc:26:e8:
a6:97:f2:d5:28:b4:bd:b8:e8:04:39:31:ab:28:a9:e5:f5:47:
6b:5e:6b:05:a9:05:cf:8b:6e:8f:b6:ff:df:48:da:df:46:76:
3f:24:14:94:9a:2b:d4:54:8a:74:ea:48:90:6f:f5:3b:da:d6:
dc:13:2f:7f:35:e7:00:ff:5c:9b:8a:39:df:3f:ba:d2:b6:4e:
49:90:6e:fd:8e:4d:50:3b:81:93:13:67:9f:e3:15:aa:29:8b:
03:f1:6f:6b:e3:d4:65:d4:30:e0:82:63:47:41:df:30:f7:8d:
89:76:0b:a9:29:7a:27:c8:87:e9:9b:38:b5:e1:be:f3:53:aa:
fd:88:cb:51:97:00:39:07:87:aa:90:ca:99:07:0f:e3:61:8b:
72:da:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:37:11 2025 by rpki-client