Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: pY0xJw1aGeIrTj3Zua86a0+z6YQnOuPi2DWtcVp6FV0=
Subject key identifier: B3:C9:D6:E3:25:24:33:3C:E9:0B:75:90:A6:52:77:E0:A6:E4:80:EE
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019928488125F8165B31A3166EEDEEF7FCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 167A
Signing time: Mon 08 Sep 2025 07:44:24 +0000
Manifest this update: Mon 08 Sep 2025 07:44:24 +0000
Manifest next update: Tue 09 Sep 2025 07:44:24 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: /kX24hQ64dm/Wy5ObOQLxYoqN2Y2ke0P1civoZ2Gr4o=)
2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=)
3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:48:81:25:f8:16:5b:31:a3:16:6e:ed:ee:f7:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Sep 8 07:44:24 2025 GMT
Not After : Sep 9 07:44:24 2025 GMT
Subject: CN=b3c9d6e32524333ce90b7590a65277e0a6e480ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:5d:36:a6:c8:b2:0d:97:52:3a:2c:ca:1b:
a5:1e:88:f1:06:38:6c:aa:32:24:f8:33:9d:38:04:
1e:81:99:1c:f2:ac:4d:cd:04:e3:4d:5e:aa:bc:00:
4a:ea:77:b0:0e:81:9d:b2:cc:fb:f6:c7:d0:e5:b5:
1f:3a:67:2c:1b:da:ed:0d:e8:60:0e:4b:57:14:a7:
9f:76:f1:f0:77:75:a7:e9:62:f6:96:a7:cc:e0:f7:
84:e0:37:05:8d:63:11:e3:2b:a0:aa:6d:67:a5:99:
db:a7:6c:1d:8d:f7:e1:1d:0a:97:f1:15:95:78:a8:
8b:b6:4b:7c:ed:6c:d5:3b:52:48:78:f9:95:e2:30:
f8:5a:05:25:54:21:e0:1b:2f:b1:46:2d:a6:fe:74:
8c:12:fb:f1:68:75:35:90:76:9e:d8:4b:c9:c3:78:
b3:0d:80:15:94:b5:00:d1:ee:59:d1:0e:bb:c0:4d:
c4:70:39:ad:2b:75:dc:90:2b:a2:a6:c2:2d:3e:97:
20:11:c5:ac:0f:a1:c6:ea:3c:59:d6:9d:fe:ce:3e:
67:aa:66:70:61:be:8c:fe:94:d9:7a:f5:95:7b:6e:
b7:cb:9d:b7:9f:f4:2d:7c:94:5c:ab:7a:94:a9:e8:
30:ed:ba:c6:fc:9a:46:75:2d:cb:5a:ba:f5:d9:15:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:D6:E3:25:24:33:3C:E9:0B:75:90:A6:52:77:E0:A6:E4:80:EE
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0d:18:9d:34:66:bd:48:2e:a7:e4:ae:6f:27:8d:b6:e1:b8:
74:2a:f4:72:e3:27:76:3b:04:16:9c:d7:0a:c4:9d:8e:df:cc:
ec:6a:f4:a9:5c:cd:26:6e:f3:7a:ee:9c:9e:25:fa:a1:fd:99:
3a:95:6e:83:80:5e:c4:dd:0e:c7:52:eb:fe:10:ef:19:53:56:
c2:41:11:da:41:a8:02:6c:99:d0:6e:d0:1d:04:82:29:ee:52:
7d:e2:27:ff:f6:94:a1:72:7f:9b:ff:40:63:d2:5b:99:83:b2:
5b:f6:0e:86:cb:d3:a5:24:48:8f:26:05:27:ab:ad:79:4d:90:
5a:4a:c7:6f:ad:b6:f5:d3:86:1b:22:8a:4a:5b:d8:7d:8f:37:
51:4b:4c:61:cf:e4:9a:fd:88:40:f9:a6:fd:c2:b5:72:16:80:
0a:65:8c:f3:84:3d:1d:68:9e:90:97:9a:fa:4a:56:d2:5c:5f:
9f:be:96:f0:65:e5:9f:1b:4c:53:22:d1:44:d2:2f:bb:dc:b0:
9e:a8:eb:d1:e1:98:43:30:ef:6a:e2:0d:10:ee:66:ce:5f:7f:
59:89:46:79:2b:db:b2:9b:99:9d:47:53:44:f3:78:65:4a:eb:
30:cf:4a:e4:18:78:b0:ea:cf:b6:04:c1:9d:84:c7:d6:7d:f1:
15:f8:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:21 2025 by rpki-client