Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: valceko6kEMP/zNzrel8kBpFlQfPpC6QEwEVUA+ez+Y=
Subject key identifier: C9:4A:55:C5:62:FA:6A:03:7D:6D:FB:10:14:6C:F6:64:AE:61:D1:3F
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 019933B70CAA1209A5CF03D1187C7481FAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 13:00:58 +0000
Manifest this update: Wed 10 Sep 2025 13:00:58 +0000
Manifest next update: Thu 11 Sep 2025 13:00:58 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: 9MJe5CniM9L7DDYOe7UEL20wh5Y53asIlMbIONQQAC0=)
2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:0c:aa:12:09:a5:cf:03:d1:18:7c:74:81:fa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Sep 10 13:00:58 2025 GMT
Not After : Sep 11 13:00:58 2025 GMT
Subject: CN=c94a55c562fa6a037d6dfb10146cf664ae61d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:57:b9:cf:19:7b:76:66:9c:c1:26:4a:b3:
4f:6e:c1:ae:6b:5a:f0:aa:31:8d:16:f3:1c:9e:45:
c9:90:23:bc:c6:5d:63:86:89:aa:6b:7d:37:f0:05:
05:fd:e1:13:db:06:e9:43:0c:75:71:b8:3d:b3:f3:
88:87:f2:af:d8:1c:79:57:82:fc:78:29:93:74:38:
c2:bf:09:73:32:a5:d1:ea:3b:19:4b:5e:90:70:6d:
c4:d8:d9:99:35:25:fb:f9:2d:16:85:c6:ec:5e:47:
4a:82:b3:cf:8c:21:f2:fc:b5:95:84:6e:2f:c3:c5:
aa:5b:94:cb:ab:95:42:0b:b5:35:18:64:37:f6:70:
7e:ff:ca:4d:35:7d:13:96:1a:16:2a:85:85:72:7e:
33:a7:f6:46:2e:e3:e2:a0:77:32:22:a0:a2:24:88:
e0:32:e3:e1:40:db:1b:d1:9c:3d:87:7d:aa:3b:1c:
5b:89:cd:e3:7f:41:ca:ab:28:74:32:09:5a:11:b4:
86:48:9f:19:c4:3d:3d:35:56:fe:d2:f4:bc:78:6a:
10:55:3a:1b:49:36:3d:e9:eb:f9:61:a5:c2:84:fd:
6c:8d:d1:59:93:91:47:e8:09:e0:fe:76:b3:b2:eb:
7c:82:aa:e2:24:3e:e8:e4:00:39:b9:20:ce:0d:5b:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:55:C5:62:FA:6A:03:7D:6D:FB:10:14:6C:F6:64:AE:61:D1:3F
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:13:10:80:dd:fd:52:5b:1d:cf:6e:c5:9a:20:e0:95:de:7d:
51:af:e2:b3:62:35:09:07:ef:0a:f3:c6:55:b1:72:e6:0f:88:
af:e8:a3:4e:74:9e:ea:69:76:e4:56:a1:14:db:a2:a2:45:56:
ae:3a:16:e4:63:67:40:85:ee:6a:ab:f5:ce:79:26:b2:9a:4d:
76:f9:0f:69:88:88:d4:6d:1b:1f:f0:62:e1:f7:83:1c:9e:94:
b3:3d:d5:29:ce:e6:47:47:d8:07:c3:6a:3e:be:10:e0:3e:bc:
a4:13:e3:d2:6e:7f:8d:51:69:35:79:4c:28:d4:07:91:31:ce:
26:8b:18:71:56:d3:66:43:6b:c7:e2:62:69:18:83:cb:b6:da:
7c:6e:90:59:01:16:aa:cc:15:dd:d1:c9:12:4f:70:28:1a:19:
6f:2a:fd:44:11:f4:78:fc:7e:bc:ed:4a:b1:c5:4a:ab:c6:80:
f3:f7:e7:c7:f4:47:e4:63:fb:9d:84:b6:50:63:a7:42:02:5d:
e4:7d:98:93:08:cd:9f:ca:0f:72:c5:a3:63:1d:a3:ed:12:28:
60:bd:4e:39:bf:44:fe:28:65:f7:ee:70:d8:3c:22:e9:11:d2:
d8:f2:a3:be:92:60:c5:95:50:02:37:f9:f4:63:74:93:9c:02:
5f:93:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:25:29 2025 by rpki-client