Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: aNzq/yByGPZRYJRDF7EDIdRcwsg+KcZvuU1owK5Ckws=
Subject key identifier: B7:45:C1:B3:C8:5E:A5:FA:06:1E:FF:A1:97:01:5F:89:24:D6:44:60
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019936EEE48885E6423FF287F7CBCB5BEAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 04:00:49 +0000
Manifest this update: Thu 11 Sep 2025 04:00:49 +0000
Manifest next update: Fri 12 Sep 2025 04:00:49 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: fh1IEM1kp20/IMwJcHqh3sW9blMCr1BLqD90LWGbCB8=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:e4:88:85:e6:42:3f:f2:87:f7:cb:cb:5b:ea:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Sep 11 04:00:49 2025 GMT
Not After : Sep 12 04:00:49 2025 GMT
Subject: CN=b745c1b3c85ea5fa061effa197015f8924d64460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:9e:a7:52:b5:f3:b2:5d:b0:1a:68:a2:81:
95:01:c8:08:d8:f2:39:8b:b9:f1:ba:1f:8c:99:7f:
4a:63:e1:12:8d:53:12:82:84:d0:ec:70:93:95:ff:
f5:34:fe:1b:ed:45:22:bd:81:3e:a5:98:d1:a8:3d:
0a:ff:a4:34:b8:4c:ac:d2:00:13:1c:50:00:6c:43:
c3:bb:fb:31:ab:8e:ea:22:e6:54:36:97:97:f7:75:
e9:f2:f2:43:e3:6e:d0:b3:91:c5:da:e8:4e:e7:ae:
a4:4b:7c:79:4e:fe:df:de:37:79:da:a6:98:f4:b1:
a8:9c:de:ad:7d:af:be:82:6d:f0:ed:e0:de:dc:0b:
30:df:3a:53:b9:1a:ad:d2:36:a1:62:06:58:5e:1e:
09:13:ab:dc:de:f6:fa:6f:ea:54:ab:b6:2c:6a:7f:
5c:af:33:74:94:15:4c:6d:00:89:ac:74:87:a5:86:
32:83:1d:7f:19:66:f8:eb:2f:d5:5b:fa:29:10:a0:
31:16:9a:50:22:94:1d:fc:1c:a5:65:58:83:a3:0a:
98:52:12:0c:f4:9c:1b:5c:c4:e3:c2:f7:f8:02:47:
5e:d8:03:f0:a8:5b:a8:9c:e5:39:b1:22:ec:2f:f8:
fb:7b:2f:2a:9a:9d:47:83:21:e7:8d:3a:b7:48:fe:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:C1:B3:C8:5E:A5:FA:06:1E:FF:A1:97:01:5F:89:24:D6:44:60
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:fc:b5:3f:4e:f4:70:63:43:a5:f4:06:f9:6e:5b:b3:f3:
fc:e8:1a:bc:21:7d:e2:75:2d:0b:57:55:96:e7:4b:fb:e5:d6:
1f:aa:d5:63:41:30:29:34:b9:42:44:d8:58:8d:56:70:0b:45:
de:2a:28:8d:96:51:d8:5f:5d:fb:fe:79:12:fe:75:4c:33:78:
6b:63:71:41:db:ec:ab:fa:7d:1c:86:3d:f7:d0:07:43:b5:ed:
c5:cf:28:70:11:a9:cc:8e:4e:72:f5:24:7a:10:de:25:5d:c8:
a6:81:20:02:fe:72:e9:f1:13:ac:6e:28:7e:f8:38:ad:80:80:
71:42:23:00:6c:93:e4:15:29:cf:fb:39:37:d9:3d:db:54:80:
bd:2b:aa:1a:f7:96:88:b2:ab:7f:44:f6:29:bd:80:34:cf:16:
e9:70:2a:c6:24:a0:3b:9b:f1:bf:a2:33:69:7b:4b:a1:4b:13:
65:0a:fc:6d:32:63:b3:87:77:22:2a:cd:a4:19:1d:9b:7a:de:
7c:47:a7:69:a5:95:ee:88:ed:65:6e:6c:92:75:b2:37:ca:0a:
8c:30:07:3d:da:50:59:58:36:0e:59:d0:c5:6d:85:40:41:1b:
99:f1:e2:77:8d:0e:39:02:dc:d5:33:09:e4:35:96:c2:dc:61:
11:7b:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:51:03 2025 by rpki-client