Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: JkxZ+wNPkCd8Ti4hTg/Pmh+jb3kQCDmc5wVOQ9/sZ9w=
Subject key identifier: 88:4F:EB:EA:0E:62:6B:51:69:E3:07:7B:C7:E2:86:A3:E0:3B:1E:ED
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019931FF32A31F54EA5378AEC7898E59188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 05:00:32 +0000
Manifest this update: Wed 10 Sep 2025 05:00:32 +0000
Manifest next update: Thu 11 Sep 2025 05:00:32 +0000
Files and hashes: 1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: 7JvIoFbl9YqGWg18IkqiIhHIlimAovtanjVRkqnl4XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:32:a3:1f:54:ea:53:78:ae:c7:89:8e:59:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Sep 10 05:00:32 2025 GMT
Not After : Sep 11 05:00:32 2025 GMT
Subject: CN=884febea0e626b5169e3077bc7e286a3e03b1eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:08:d9:dd:35:68:77:28:7d:d1:c0:2c:ff:
81:e9:db:87:24:90:76:95:e7:20:35:cd:34:1b:3b:
56:c5:95:0b:7e:48:5b:35:aa:52:f9:27:b3:18:5a:
19:1a:01:8c:28:65:f9:33:dc:b7:a1:45:97:ce:2f:
79:25:04:00:32:1d:e6:4b:88:b7:2e:be:07:0a:6c:
2a:db:b8:af:49:62:84:2b:4c:4b:a8:bd:85:cd:cf:
df:a4:e3:3b:0a:11:7f:50:ad:41:64:17:22:0e:04:
37:14:7e:2f:33:79:a5:22:bc:2b:d2:2e:73:d2:4d:
65:b2:71:24:c2:1c:d0:4c:fc:ac:25:04:0e:98:cc:
1d:1c:2f:04:f1:e4:69:47:4d:78:03:9f:16:88:17:
e7:e4:6c:c1:93:af:a0:57:22:2a:2d:fa:6b:55:a6:
e3:f9:9b:85:94:31:fb:6b:c5:88:0e:7f:c9:f9:d1:
83:3b:a3:38:d9:69:19:c2:7b:3e:26:a3:de:6a:08:
28:c9:e6:aa:e8:d6:b8:ce:09:30:86:ce:b9:52:d1:
22:77:ee:91:be:2a:dd:17:4a:0b:e7:12:19:39:a5:
0f:c0:cb:3f:ca:7e:8e:a9:5f:d2:9b:47:91:34:87:
74:32:a0:f2:79:79:91:ec:ef:4d:99:e9:e2:2f:c6:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:EB:EA:0E:62:6B:51:69:E3:07:7B:C7:E2:86:A3:E0:3B:1E:ED
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:a3:62:c5:3f:a4:c2:90:58:0e:a7:f8:25:54:6d:78:42:
b2:9b:36:56:a2:8a:14:58:28:28:86:0e:c0:a3:a8:a3:4e:cb:
04:5a:a7:df:de:63:b8:4a:78:63:71:28:94:c6:fa:da:d3:f4:
1f:af:1c:9b:5d:84:f4:f1:26:b3:05:10:9e:3a:42:99:67:3d:
d0:6e:71:cc:10:72:93:97:2a:d6:ea:71:9d:ed:eb:07:60:1b:
f0:56:da:ba:6f:2a:4d:a6:70:48:93:a2:42:86:88:09:c2:2b:
fd:dd:92:59:7c:37:a5:07:80:88:63:db:4e:f2:31:4a:68:a5:
9b:f9:5e:4e:b0:23:88:ae:c0:56:b2:b1:b0:77:53:e4:f5:6f:
da:13:0c:c7:18:be:9b:90:bb:9b:25:f3:95:2e:82:7d:95:9c:
2d:bc:9b:65:de:33:4a:47:4c:bb:05:35:7a:06:cc:60:07:97:
fb:b3:94:28:c8:08:74:c9:8e:ae:06:ba:41:6b:2c:a9:6e:71:
9a:5e:da:e7:72:8d:23:61:68:54:e1:51:97:7e:de:6c:ca:05:
54:c1:4e:7c:e7:f0:ad:5a:c8:83:a1:3f:d9:e2:60:ed:ff:b4:
a6:db:f1:bc:2f:4d:22:29:22:de:aa:4c:87:4f:23:b7:1d:9f:
e6:24:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:13:33 2025 by rpki-client