Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: r/4iPFlwLp8BICRn5ui8YAlgEBOsgmwJq1r2yrherXQ=
Subject key identifier: E4:74:86:25:51:90:90:7B:21:B6:52:FC:24:0B:45:99:C6:8C:45:29
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0199589FA75F45B2898F4A43FA69049E8134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 169B
Signing time: Wed 17 Sep 2025 17:01:21 +0000
Manifest this update: Wed 17 Sep 2025 17:01:21 +0000
Manifest next update: Thu 18 Sep 2025 17:01:21 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: pSzdhxmMhIdh0k3fG9BAnOUogzKYmI9D5Fdc+1gwmNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:9f:a7:5f:45:b2:89:8f:4a:43:fa:69:04:9e:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Sep 17 17:01:21 2025 GMT
Not After : Sep 18 17:01:21 2025 GMT
Subject: CN=e47486255190907b21b652fc240b4599c68c4529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:92:00:de:a1:2a:7d:fa:ba:ac:7f:8f:42:
57:cd:68:56:35:d2:a5:98:6a:07:6a:ac:a7:b8:98:
92:64:75:b9:f9:9c:16:9d:fb:ab:e6:d8:79:5a:74:
15:5d:51:fa:4a:d3:ca:9d:81:2b:d2:d5:2e:db:9f:
93:87:88:02:66:ea:fe:18:92:fe:18:78:5f:c4:bc:
0b:39:47:84:f5:41:16:59:9d:ac:f2:e5:2f:5a:e6:
36:54:68:33:f0:88:16:78:9d:b7:61:b2:b7:4f:c5:
16:a9:77:b7:0d:10:84:eb:4f:e0:a7:7b:85:16:8e:
b6:98:d8:41:d2:8e:d5:b8:07:ad:28:9b:db:4a:61:
88:04:2f:33:af:08:89:0c:36:56:5b:70:a1:f8:0c:
8e:62:25:06:7b:07:b3:f8:3c:90:f1:16:86:66:66:
f2:1f:6b:64:f0:8b:bb:09:5e:d0:57:79:52:a6:21:
23:62:63:94:a8:04:e3:6d:03:0a:ad:69:af:f8:37:
37:9b:fb:92:92:1d:27:cf:08:8f:d3:ef:ef:b3:85:
f0:55:7a:bb:fa:36:05:21:1c:cc:ac:8c:9d:4c:9b:
22:08:91:54:59:c6:98:ec:00:ee:89:15:eb:21:d9:
ff:a3:a5:a7:64:6f:66:78:ba:77:e4:c0:18:c7:29:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:86:25:51:90:90:7B:21:B6:52:FC:24:0B:45:99:C6:8C:45:29
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b3:13:3f:f9:73:38:28:56:ad:50:31:0f:19:ff:9b:c7:2b:
7e:6b:01:c2:06:69:70:fd:9a:c2:f8:96:6e:3f:9c:b8:df:76:
38:29:fe:a9:55:63:47:6b:01:62:ef:a5:42:53:76:6b:c9:58:
39:1a:4f:bb:34:e4:97:9c:d5:5b:8c:15:e9:94:b4:dd:12:c6:
88:a5:9f:d2:06:b3:c3:4e:f1:83:fb:1f:7a:6a:45:75:d8:53:
66:02:dc:bd:75:35:6a:ef:79:a3:9c:d9:6f:47:fc:31:12:c4:
42:5f:e7:01:6d:f0:0b:9b:94:d6:f6:f5:b2:60:04:64:ec:4f:
e9:d7:41:cc:8f:ed:4a:1d:e5:b2:d2:34:55:0d:39:67:3f:4a:
c8:37:6e:ff:9f:4e:0e:62:91:5c:0c:d1:f4:30:fd:de:ee:fb:
c8:cd:05:26:a2:4a:7a:2e:46:5f:e8:65:44:02:97:28:68:e5:
26:25:fc:0f:7e:bd:1c:7f:bb:a7:8e:68:09:22:29:65:5c:a9:
f8:88:03:60:10:58:26:c9:22:40:e4:7d:2b:ad:01:db:21:3c:
60:2a:69:cb:3d:fa:e1:a0:51:58:83:36:d8:ed:3f:31:60:f2:
81:6d:51:33:a2:17:10:fb:5e:87:74:59:00:a7:38:92:f2:09:
31:fc:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:40:30 2025 by rpki-client