Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: UcCuXXfG/E/PQzhoctaTGsbCksL62ybNAySRJpfGYKk=
Subject key identifier: 91:88:A3:30:FE:2A:D8:AE:FA:DD:31:81:7D:CD:0A:00:DD:F7:75:92
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019916F5D62BE55892AD6D22D7ACBE488D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 166D
Signing time: Thu 04 Sep 2025 23:00:33 +0000
Manifest this update: Thu 04 Sep 2025 23:00:33 +0000
Manifest next update: Fri 05 Sep 2025 23:00:33 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: KWOK4Pyd6fNWy1Q58p/WueFbdRQNOyPlUlIpN0efBVQ=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:d6:2b:e5:58:92:ad:6d:22:d7:ac:be:48:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Sep 4 23:00:33 2025 GMT
Not After : Sep 5 23:00:33 2025 GMT
Subject: CN=9188a330fe2ad8aefadd31817dcd0a00ddf77592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:da:f9:3c:25:24:10:43:84:b8:6e:7a:37:
bc:b5:a1:e9:ad:90:be:be:fc:d8:32:4e:44:84:47:
4b:01:90:0f:df:35:3d:b7:1b:bc:cd:af:96:3b:7e:
db:96:ad:15:ce:2d:27:ad:95:85:61:a5:aa:12:6d:
bd:f2:79:46:61:b8:b3:5a:fa:fd:c1:a7:d3:ef:d6:
a8:6c:8f:85:e7:6d:50:50:d2:0a:f3:4f:93:34:04:
f5:5e:dc:d7:aa:cc:f0:a0:a9:8c:e2:87:74:3a:c2:
ce:ed:c4:93:58:af:ba:cd:79:56:80:73:3c:7a:56:
ef:f4:b7:3d:21:30:27:ff:7c:e1:aa:95:9c:63:72:
c3:76:e8:c3:0e:88:04:a4:d5:ca:f2:d2:32:32:e8:
cb:44:0f:97:39:2c:4f:f1:0b:8a:18:de:62:5f:b3:
50:05:2b:89:ed:a6:ab:97:70:42:42:38:3c:eb:3d:
85:4e:55:9b:ab:0c:1b:46:0a:34:8b:58:0b:fd:ed:
43:5b:1a:0e:c9:40:ed:15:f3:a6:20:20:90:8e:94:
ed:36:d6:d8:bb:73:f9:f8:95:a2:0a:a8:73:82:c4:
c1:79:72:7d:bb:ba:0d:10:f1:50:f6:0b:86:5f:11:
0a:61:34:63:e4:3f:64:1e:0d:12:fe:bf:10:5c:15:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:A3:30:FE:2A:D8:AE:FA:DD:31:81:7D:CD:0A:00:DD:F7:75:92
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:50:03:ae:44:3c:3b:d2:1f:9a:de:7a:b6:b4:04:a1:21:e6:
5c:11:61:0d:39:31:d6:3b:ba:50:2e:37:12:2f:c0:95:eb:1e:
64:be:1d:5c:47:10:11:c7:90:f2:9b:40:58:c3:2a:c0:c4:ee:
17:8a:f4:e2:8a:c5:48:f8:7b:88:2c:16:61:10:41:66:70:82:
42:fc:24:ed:b0:04:57:1b:23:87:02:d2:51:26:97:6a:82:04:
76:95:06:22:25:51:6a:6c:6e:4b:e3:f6:ff:22:f5:8d:fc:d3:
ca:06:04:0a:3f:90:66:f6:8a:d9:b4:3d:d0:f7:41:dc:1d:95:
0d:6e:2c:11:1d:83:1c:f4:9a:cf:4a:70:19:2d:18:99:6c:83:
3e:97:74:02:78:ec:7c:3f:4c:5e:24:1e:34:8c:7e:37:15:6c:
2c:e9:0f:02:fd:f0:9a:68:e1:d5:f2:4c:d8:d1:79:d1:01:c2:
83:02:cb:39:03:94:e3:a5:c5:d9:44:91:a9:8a:64:be:8e:6d:
7c:f4:71:0b:f4:0f:cf:7a:09:bc:3a:75:cf:b6:05:56:54:28:
92:6a:43:6e:b4:b0:1c:ee:9f:cf:b0:ef:a4:9d:d4:1f:f3:8b:
91:a7:00:63:9f:ec:4f:0b:31:aa:7e:da:56:e8:ff:d2:6e:08:
56:d7:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:09 2025 by rpki-client