Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: D2zfMP7u9Ic7O6xXZcWOOHNBri+20IULxg2h3fM70pc=
Subject key identifier: F6:1E:09:5B:C2:FB:44:CC:4F:3B:DA:E0:4C:9F:53:C1:35:76:D6:F9
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0199225599880FC6A6667083D23FAB46F0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 04:00:59 +0000
Manifest this update: Sun 07 Sep 2025 04:00:59 +0000
Manifest next update: Mon 08 Sep 2025 04:00:59 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: x6X44v+8IPGkVd1+0QmpID/v4lbCCwx7HbE8UTvvVuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:99:88:0f:c6:a6:66:70:83:d2:3f:ab:46:f0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Sep 7 04:00:59 2025 GMT
Not After : Sep 8 04:00:59 2025 GMT
Subject: CN=f61e095bc2fb44cc4f3bdae04c9f53c13576d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:f3:86:5b:05:da:6a:c8:7f:a9:26:1e:b0:
e5:ac:13:76:c4:04:fa:45:44:f3:e1:c7:eb:90:9a:
ec:f9:1b:77:73:3d:8b:fc:c7:4e:29:b0:20:4d:5b:
46:9a:27:73:06:16:60:6b:1f:5b:8c:b3:bc:80:3c:
92:09:18:00:00:5f:70:17:3c:9c:cb:6e:9c:b1:7a:
04:d0:dc:3f:8f:e9:3b:c5:21:57:94:4e:d8:33:c2:
66:be:74:d2:01:d7:67:95:fd:d5:a3:bc:16:4a:9f:
2f:84:c1:33:04:d1:0b:fb:68:18:81:a0:48:6d:18:
f0:57:60:85:19:f0:93:bb:81:ea:12:16:ea:39:08:
6d:f9:59:32:63:f3:c8:d0:8b:2e:21:47:18:d5:4a:
0d:94:77:3e:e1:f7:77:03:36:3a:5a:b2:19:9a:87:
0d:06:0f:3b:20:00:ad:b8:5a:22:53:5c:e6:85:67:
a6:14:82:fe:59:c3:59:72:7d:cd:87:61:4c:05:8e:
a0:98:60:bc:1c:80:cc:0f:d2:78:0d:da:b4:02:62:
b0:a8:e8:f0:57:8e:12:86:e6:09:12:f3:4e:71:c4:
80:8a:46:da:48:31:dd:54:37:3a:3e:a6:b6:2f:98:
e6:b8:59:1f:35:cc:80:bc:0d:d6:fb:93:44:48:dd:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:09:5B:C2:FB:44:CC:4F:3B:DA:E0:4C:9F:53:C1:35:76:D6:F9
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:59:f4:84:37:22:78:e0:fd:41:ce:5e:f4:5b:c3:dc:60:
28:24:cb:71:2a:01:7b:87:86:43:80:98:39:22:f0:3a:b9:35:
93:64:04:e6:c2:b1:45:1b:0b:06:f3:85:5d:e8:57:41:a3:07:
0f:82:39:8b:0c:6a:01:5b:3a:9d:68:89:14:66:95:48:d6:b9:
d5:b3:64:31:86:bc:ff:ef:c8:12:6c:8f:aa:de:29:3a:b9:14:
be:56:17:8a:02:e0:36:25:f9:ac:e3:85:0c:a2:f8:e2:7b:5c:
1a:3b:4a:9a:5f:dd:d9:a4:78:9e:fb:a9:0b:2d:cb:9a:34:8e:
65:4b:3f:b2:82:6c:15:1c:70:e6:5b:e9:bf:7d:04:e3:44:ec:
5c:97:c3:94:35:77:44:bc:bf:ee:d6:59:15:be:8f:5c:3d:74:
71:3f:55:91:51:38:66:de:95:ef:e6:bb:4c:1c:9e:32:6a:f1:
63:c7:ee:bf:24:3e:e5:16:a1:e5:59:a4:a2:9e:f5:b2:f6:9c:
62:21:a3:6b:92:85:f7:24:88:ce:fd:c0:e1:3a:7e:71:f7:24:
51:c2:71:e1:c8:33:af:da:a4:ea:07:ca:ee:7a:52:91:ce:64:
3a:58:8d:76:1b:fd:a6:b5:dd:fb:c3:9d:49:aa:42:df:e6:92:
3a:a5:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:40 2025 by rpki-client