Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: 1iFXYY7ISB73wnCIEOeX4kl6zJM/7lCoibILHDde378=
Subject key identifier: 99:D8:88:0D:20:A4:37:D1:84:9E:94:F7:3F:A9:D4:16:63:56:CF:4E
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019931FF1F4664E925275A5599085BEBCD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 05:00:27 +0000
Manifest this update: Wed 10 Sep 2025 05:00:27 +0000
Manifest next update: Thu 11 Sep 2025 05:00:27 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: iu3ahxAm5d3BD/+bzddArQ+U9TpBGkHc1Xs80nACJrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:1f:46:64:e9:25:27:5a:55:99:08:5b:eb:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Sep 10 05:00:27 2025 GMT
Not After : Sep 11 05:00:27 2025 GMT
Subject: CN=99d8880d20a437d1849e94f73fa9d4166356cf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:b4:95:ed:fb:5f:2d:47:5f:f1:76:d5:21:
12:16:4d:d6:47:44:fb:75:69:e6:9a:1b:76:22:6f:
0b:c7:c7:2e:82:b8:c9:cf:c3:8b:0c:34:4c:2e:dc:
c9:80:d5:2f:93:87:99:c2:08:12:c1:3a:11:f8:c8:
eb:b0:8b:91:54:e1:ad:d9:e7:48:34:f8:d8:19:27:
98:44:71:7a:31:43:74:1d:64:08:22:c5:1d:26:0b:
74:2f:2e:05:44:22:29:18:60:70:a4:89:68:85:ff:
46:fb:b7:34:95:b0:56:50:98:cb:bb:d0:06:a3:4b:
a6:af:09:6c:18:11:52:43:e9:3d:30:41:4f:0a:69:
72:46:40:2a:83:8a:38:26:36:14:a0:76:d6:f8:f3:
9f:cf:98:3e:6d:3b:e3:17:3a:df:0d:7e:c9:a1:47:
d8:53:a0:f2:35:64:45:b9:fa:8f:14:01:03:c5:d0:
ae:21:51:7b:3a:e0:4e:c7:09:bf:bd:9b:de:2f:ae:
54:25:61:72:b7:10:7a:ae:12:0f:cb:6e:3b:d3:a5:
50:60:17:a0:97:da:d6:61:c4:6e:65:9a:2f:16:b1:
78:15:9d:53:25:4e:a7:24:d5:b6:4e:5f:5c:7d:bd:
80:81:80:71:58:4e:4a:28:9d:e5:f3:35:1b:3d:77:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:88:0D:20:A4:37:D1:84:9E:94:F7:3F:A9:D4:16:63:56:CF:4E
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:fa:51:a2:ce:33:0f:54:81:2a:a6:96:32:11:db:bd:57:
05:3d:fc:b9:eb:70:bb:5e:63:40:2f:73:f6:26:12:4a:5c:99:
e6:75:37:9e:f5:af:db:fc:22:5d:6f:64:90:f8:83:9d:d3:4a:
6e:9f:ee:ec:91:81:26:69:8a:4f:43:1a:8e:23:f8:a2:95:d6:
2a:86:b0:a2:52:df:50:76:76:cf:7a:ef:42:f0:fe:67:b8:a5:
38:74:32:32:8c:ad:0e:ad:22:d7:7c:54:0a:d7:b7:e1:cb:56:
cf:cc:0b:a7:1d:ab:19:e1:63:6a:2e:97:b0:83:40:4b:72:a3:
39:3a:88:5a:bb:85:18:af:11:5c:2a:5e:b5:50:41:4a:16:d6:
cc:85:88:90:3d:8a:3d:2b:96:26:b1:0c:69:89:24:b1:50:5f:
b8:35:1f:13:28:9b:fa:24:f1:c0:10:a4:4b:40:73:19:9e:a6:
c4:7b:a2:17:a1:14:2a:8e:00:d4:63:ef:df:0f:b2:33:e3:06:
e4:4e:01:f5:25:fb:4b:b0:df:a6:ef:80:03:65:25:0c:7a:05:
12:05:fb:c8:a6:1c:0f:c5:d5:97:e2:5a:73:46:50:39:8e:6d:
d4:ff:36:c7:32:15:44:97:33:f8:48:b7:28:5f:e8:ea:39:d5:
62:9d:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:04:00 2025 by rpki-client