Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: kJBPagcWpjK9oymi/mCmbr5FpEwrpQOa4W0yHgIR5/8=
Subject key identifier: 00:E5:8A:CB:5F:E8:9B:DD:91:0B:AD:3A:BB:09:CE:0C:DA:6B:04:1A
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 01992FA37F9EF9C36AAFF2D0C528995DA2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 18:01:08 +0000
Manifest this update: Tue 09 Sep 2025 18:01:08 +0000
Manifest next update: Wed 10 Sep 2025 18:01:08 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: FVZXkHDSdGffcs6mAkFCpa4FBXmVc3FgyhQ68xW5FKY=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:7f:9e:f9:c3:6a:af:f2:d0:c5:28:99:5d:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Sep 9 18:01:08 2025 GMT
Not After : Sep 10 18:01:08 2025 GMT
Subject: CN=00e58acb5fe89bdd910bad3abb09ce0cda6b041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:35:9c:a5:d3:ce:8a:2a:0b:5c:f1:4f:41:
a9:98:11:2b:96:a5:91:5a:6b:97:dc:92:89:36:2a:
34:33:17:70:8b:17:fe:a2:40:06:41:1c:d4:e8:54:
57:f3:ed:72:9d:18:5b:bb:11:b1:28:04:9b:95:1b:
72:54:26:2d:15:89:2c:a0:ff:75:3c:2e:55:9f:44:
40:22:81:61:ac:92:e9:50:85:7b:7f:bf:30:f9:0e:
72:90:57:28:e7:91:e9:c8:7d:28:8d:7a:72:32:35:
e2:dc:e9:b2:cc:40:23:6b:a4:6d:02:e4:cc:fc:9d:
00:63:88:1d:49:4b:ca:ff:33:36:d2:a5:1b:ff:54:
6c:70:79:b9:53:bf:84:fd:33:7b:e6:b8:37:95:f5:
a3:4a:97:99:12:11:e9:d9:d9:50:e6:ab:41:35:6b:
2f:b9:46:b2:07:da:19:b5:48:16:58:9f:22:ed:5c:
21:e8:1b:e8:89:05:8e:bc:f6:ec:62:ab:df:fc:bd:
4a:e9:74:88:90:75:38:61:3d:4d:0a:89:e1:01:1c:
6b:7a:d2:de:c2:70:02:38:ed:db:66:95:b7:1f:3d:
7b:6f:af:dc:0a:70:5a:82:60:a7:64:c3:f6:cf:1a:
5d:e4:5c:44:d0:ff:54:1b:83:9b:12:a8:4f:2f:a8:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:8A:CB:5F:E8:9B:DD:91:0B:AD:3A:BB:09:CE:0C:DA:6B:04:1A
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:aa:30:3e:2f:81:69:2f:35:64:11:99:d1:3a:02:a6:ac:
9f:60:fa:90:ca:05:2c:4c:9c:87:32:ad:fd:4e:a0:f3:70:e7:
fa:79:8a:db:6c:3b:63:f6:72:6e:f8:09:7e:23:b7:43:74:a1:
33:e7:11:1a:31:69:0b:d3:45:51:ab:7a:f6:c5:3c:63:e5:8b:
8f:90:40:b7:cb:d9:f3:a4:0b:ff:8a:a9:9c:38:84:55:0a:d6:
94:06:c9:f2:c8:d1:03:1c:73:b7:5f:e6:19:ed:82:0f:60:42:
e9:52:cc:c1:62:cd:70:36:bb:e4:41:9e:66:0f:71:22:5b:0d:
1f:ac:8d:62:57:b6:f6:ae:5c:39:15:b2:e0:91:42:15:d4:fe:
4f:9e:3f:20:ea:bd:97:d6:c4:d9:ae:86:ab:14:e8:32:3e:99:
a8:89:3d:fb:0a:47:2f:b5:a1:0f:4f:62:77:5e:3d:c1:ec:e3:
7b:5d:23:19:1c:50:fc:8e:b7:5c:56:f1:6f:84:ad:9a:d1:8f:
ec:74:76:f0:89:67:ec:31:64:cb:90:6a:7c:09:37:09:f0:17:
21:4f:2a:5d:21:a0:50:36:a2:23:10:eb:fa:0a:5c:26:b6:4c:
d7:63:b5:84:3d:f7:3b:b3:7d:80:ba:d7:ea:32:73:95:09:10:
18:b3:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:03:38 2025 by rpki-client