Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: NcF+KmWhj9Jbtzh4b6r86Rm/AnL9vLp/5MjbDJacZIk=
Subject key identifier: D1:CB:6D:42:D4:86:12:50:41:18:DA:F1:B1:00:B3:70:17:AC:01:CE
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 01993680ADAFBF0ECFDBBC43611AC9E29766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 02:00:26 +0000
Manifest this update: Thu 11 Sep 2025 02:00:26 +0000
Manifest next update: Fri 12 Sep 2025 02:00:26 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: AVy6VTOFx0ZsFl3HxlhBITIfcb+mrlUyQdCqBvYlTOY=)
2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:ad:af:bf:0e:cf:db:bc:43:61:1a:c9:e2:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Sep 11 02:00:26 2025 GMT
Not After : Sep 12 02:00:26 2025 GMT
Subject: CN=d1cb6d42d48612504118daf1b100b37017ac01ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:a3:ea:4f:97:5e:d8:ca:75:41:d0:0e:b5:
17:eb:88:02:28:f0:a0:e1:15:fe:1c:9a:ab:e6:4e:
d3:75:7b:a5:89:70:f2:ad:01:a5:37:25:cf:d7:1d:
98:ad:98:69:bf:bb:53:1b:29:8b:b8:d2:51:f2:48:
4b:8d:08:0c:98:14:7d:76:43:33:e3:13:23:6f:28:
78:3a:5d:9e:2d:36:43:5f:da:60:eb:cc:95:88:1b:
19:72:dc:66:10:d9:95:7b:22:d0:69:53:3f:74:fd:
fe:a6:6d:fe:17:5d:66:23:8e:91:f1:a3:e0:5e:80:
36:3e:a8:d6:43:3f:d1:8a:79:93:86:b6:88:b2:06:
28:e2:59:83:eb:ff:f8:18:7b:57:07:a2:48:cf:9f:
f9:0b:af:af:ec:40:f3:b9:16:ae:5b:56:a1:79:d0:
0c:c5:df:99:72:97:de:4d:b7:1b:ab:cd:83:ea:7f:
9a:ab:57:24:2a:1d:0a:b8:01:06:ed:57:66:ec:be:
4a:c4:a6:68:5b:87:15:b8:5e:c5:d5:9d:2b:d3:fc:
0a:77:71:d1:12:c1:a3:04:ba:95:53:32:1b:d3:10:
fb:02:e8:1f:7d:28:77:e4:01:de:67:49:79:85:20:
9f:2c:90:07:19:19:4f:59:15:1f:a7:76:2c:0c:11:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:6D:42:D4:86:12:50:41:18:DA:F1:B1:00:B3:70:17:AC:01:CE
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d9:66:ed:14:63:83:77:57:6f:6b:61:5c:ba:af:a8:b9:ba:
f0:cd:da:df:43:6d:bd:9c:1f:a8:a7:0e:56:36:9e:62:48:b0:
d9:db:92:9c:00:52:10:a8:fe:e4:68:a9:4f:30:1d:c8:32:01:
9c:c8:c2:39:c3:35:8d:1f:9f:6e:f8:ed:0e:e5:63:1e:cd:3f:
63:6a:71:7f:83:bb:0f:0e:34:e1:e0:f4:59:53:02:58:8a:70:
19:55:de:77:b4:38:81:2c:8f:b5:70:84:16:07:3e:d0:77:65:
ff:e3:77:0c:f6:d8:9c:7b:2b:4d:96:69:81:d3:54:f9:94:05:
dd:0e:ca:d4:94:3d:ab:68:a6:ee:22:d9:d9:a8:7c:46:38:97:
f7:e1:cc:85:c7:30:fc:44:8a:27:1e:4f:96:4e:2c:dd:c3:58:
74:02:1a:c7:9d:f6:61:1f:e4:14:e2:2f:b6:5e:d6:40:c4:eb:
4c:84:72:a0:76:c1:63:d1:63:40:34:de:2a:31:be:e0:eb:01:
d8:b9:ef:da:3a:01:64:e8:b4:dc:b2:72:f4:b6:82:6f:a1:da:
2d:f8:13:7a:c8:41:1c:48:45:f1:1d:30:99:e0:53:c4:b7:a2:
32:db:19:18:2e:fc:16:4a:a0:e1:70:43:8c:60:37:10:8c:84:
87:3e:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:53:45 2025 by rpki-client