Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: s4y72ENiPNY4KbsOznTM9czYRUT3dMZtN2kp98O4FjI=
Subject key identifier: F8:61:C5:D5:EA:AD:6E:FB:C3:D5:7E:FB:21:EC:6B:EB:D9:BC:61:0F
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 01994C2DAD658D589B9B1F0721F7CEC6BE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 168C
Signing time: Mon 15 Sep 2025 07:01:25 +0000
Manifest this update: Mon 15 Sep 2025 07:01:25 +0000
Manifest next update: Tue 16 Sep 2025 07:01:25 +0000
Files and hashes: 1: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (hash: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=)
2: DyQE1mAMz0-Y555bTSVvXkqEC1U.roa (hash: hwRt5mho9M1lkKLFQYJUnV8/sYmEs4QQ4EstdFb/mZk=)
3: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: Ha3Lzd7bucPEKIADDLydKHGsH2DYjh18eArXoUEm1KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:2d:ad:65:8d:58:9b:9b:1f:07:21:f7:ce:c6:be:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Sep 15 07:01:25 2025 GMT
Not After : Sep 16 07:01:25 2025 GMT
Subject: CN=f861c5d5eaad6efbc3d57efb21ec6bebd9bc610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:fc:6a:39:1c:b9:89:42:8f:4a:76:75:28:
d3:ef:e7:eb:ed:b4:e4:c6:e6:36:ef:3d:d0:53:7e:
f1:3b:66:4f:9a:3d:b5:47:d0:67:1e:41:1c:4b:1e:
b3:6c:ae:32:f5:82:51:11:62:3f:ec:75:a2:97:b8:
5e:b2:b6:ee:9d:09:83:33:19:b6:31:cb:e7:97:d0:
28:1b:8b:62:62:ee:79:06:42:0b:e6:b0:7a:07:0f:
ed:82:07:d6:c6:fd:d8:aa:9d:7d:48:eb:00:6a:e4:
39:21:07:2f:93:a0:92:fe:1b:4e:7a:08:e6:94:6e:
41:54:1f:70:a1:de:8e:32:f0:88:2b:d7:50:8d:b6:
13:73:e4:5b:5e:7c:7a:47:8a:38:f3:da:50:87:03:
8f:81:11:13:c3:38:99:ab:66:3c:c6:3f:7f:d5:bd:
72:6c:3d:c6:5a:b9:44:66:4c:ef:dc:b8:77:70:64:
56:b4:3c:fa:e8:04:04:db:43:38:2a:c5:f0:f7:ca:
f6:0e:28:4a:9e:8a:81:c1:1c:ea:24:80:39:ba:32:
47:e9:d3:3b:0f:3f:f8:34:4f:01:80:26:b5:05:5a:
bd:2a:ee:8b:fe:11:48:8e:95:08:85:e3:4f:74:75:
c8:23:31:e6:7f:91:f5:3f:2a:07:03:0c:bf:d4:42:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:C5:D5:EA:AD:6E:FB:C3:D5:7E:FB:21:EC:6B:EB:D9:BC:61:0F
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:47:d3:34:36:d8:0d:18:bc:15:85:16:13:56:67:15:53:
5d:d7:2d:74:f3:d3:21:9d:49:7f:ed:7d:6d:2c:9e:0a:f6:96:
4f:0f:d3:0d:b6:f8:cd:d1:7f:5e:0e:7f:85:59:d5:c6:78:96:
c6:6c:0d:57:0a:59:6b:ad:2a:a3:a1:39:61:2e:a9:2d:00:f0:
69:11:98:ba:ad:23:66:04:0c:ed:04:2b:5f:c6:96:28:49:ca:
a8:e9:d3:a8:34:c1:53:48:e7:05:a1:d5:69:52:48:f2:2f:51:
c5:70:ad:de:f8:7b:fa:70:36:c4:db:e4:2d:54:44:3b:b1:3b:
f7:0e:92:e6:aa:f0:8e:76:9e:db:29:3e:d3:2d:df:b8:45:74:
b4:69:64:c5:19:69:bd:d0:31:b6:90:df:97:a9:c4:d1:f2:e7:
57:7c:3f:c2:c8:3a:d9:f8:90:b7:1b:3d:68:68:bb:52:42:4a:
a3:ff:e2:c4:aa:71:62:0f:db:4b:bc:c0:1e:51:bd:fb:dc:73:
7a:dd:5d:8f:6d:94:f5:85:6c:34:34:e2:30:d4:c3:17:38:e5:
f1:5e:d9:8b:14:04:88:b7:29:e2:d3:4c:2e:d5:68:ef:07:21:
73:06:b2:49:d3:57:c6:ca:f5:fd:94:78:5b:97:ea:e2:46:5c:
5c:16:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:19:05 2025 by rpki-client