Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: J1MLuCssdwzMjC+VPyWkQ+Fbuno/ULW4I7AFTSCRsPQ=
Subject key identifier: AA:82:BF:55:2B:62:ED:43:3E:45:10:DB:71:55:CB:F2:B1:D6:FA:25
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019935DC1F1718E085F7ECC8C02E7D8B31C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 23:00:42 +0000
Manifest this update: Wed 10 Sep 2025 23:00:42 +0000
Manifest next update: Thu 11 Sep 2025 23:00:42 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: LYn6xeVW+MBE63n5OoJ33zaPfE+ZIpFcqKO4xGTI9r4=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:1f:17:18:e0:85:f7:ec:c8:c0:2e:7d:8b:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Sep 10 23:00:42 2025 GMT
Not After : Sep 11 23:00:42 2025 GMT
Subject: CN=aa82bf552b62ed433e4510db7155cbf2b1d6fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:dd:e5:59:9d:f5:2a:c0:f0:03:fb:5f:76:
4b:14:6a:16:64:c2:ba:b7:5c:55:49:3a:50:43:c5:
65:e4:9e:b6:a1:fd:43:25:be:04:68:ec:34:5a:fa:
5c:8b:f2:22:a9:35:e3:43:b6:bb:e9:36:01:ee:00:
18:59:60:95:82:24:ee:aa:06:28:05:ca:64:57:db:
56:6d:05:94:71:89:0b:f3:d5:7f:4a:6d:e3:74:bc:
0c:68:e1:92:d4:bb:2f:77:76:c7:cb:5e:a9:04:60:
65:66:51:5e:58:7b:34:60:93:04:96:df:cb:45:31:
20:2e:d3:c1:99:b4:bf:8d:79:55:37:d6:2e:91:e6:
5e:93:7a:bb:fd:05:3c:56:2b:57:b1:90:40:b0:04:
e4:f6:d4:29:a0:46:31:71:b3:7f:0c:17:27:53:93:
87:a3:a9:59:19:d0:97:d7:42:20:ad:3f:2b:9e:4d:
ba:ea:3e:4a:1d:3c:1d:ff:78:78:1a:c1:39:17:cd:
e2:5c:01:50:55:b3:12:c1:d2:1d:2d:d2:02:5d:b5:
a6:f3:e9:a7:a9:2f:50:bc:d4:9d:59:85:eb:94:1b:
f5:58:e5:e4:81:4b:d1:1d:7f:d3:ad:c0:da:b1:a0:
a1:fd:7e:c7:a2:f5:f9:1a:36:c0:a0:39:96:40:41:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:BF:55:2B:62:ED:43:3E:45:10:DB:71:55:CB:F2:B1:D6:FA:25
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:63:29:04:a0:fe:55:ef:24:a6:fc:43:4d:18:90:48:5b:
e3:56:55:a5:09:04:a7:f0:ce:78:12:99:ba:df:0e:70:f5:64:
be:8a:e6:20:ff:ee:d5:59:9a:60:5a:a7:4c:18:fe:c8:41:1b:
e4:54:28:bb:bc:44:4d:3b:9e:c8:0a:66:c5:4c:b4:1b:4c:f6:
4e:57:0c:4f:82:22:9d:7f:f8:34:d4:c5:71:0c:18:88:69:01:
98:58:ff:55:74:be:0d:86:44:09:87:83:14:84:b1:91:4c:72:
96:c0:b5:7b:96:a2:42:4f:a3:11:d6:fa:78:f5:25:4e:fe:2a:
11:33:61:0a:91:18:ec:f7:c0:93:9c:e6:ed:14:b5:79:d2:d3:
79:b1:07:dc:98:90:86:98:4d:2b:30:5f:27:2e:41:9b:05:71:
07:c2:61:10:e3:7e:53:75:91:32:02:83:07:90:f5:d6:97:85:
d2:51:a4:17:6c:a9:ea:03:4e:fb:32:6d:7f:4d:3d:86:6a:05:
ac:a3:8b:9d:89:d3:58:84:ad:df:fc:3d:e9:e7:7c:28:79:c6:
88:24:cf:11:97:07:03:e8:60:12:f1:a9:9b:a8:a8:1f:fb:ba:
16:07:1d:0e:5a:73:d3:53:fb:87:07:15:7a:1f:19:67:ba:63:
85:a7:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:54:46 2025 by rpki-client