Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: hxAjTtHu5eF944e1L+P6UbM2TO6mMtQRI3dEgUlaX2s=
Subject key identifier: 0E:52:FC:B9:BC:1F:59:EC:C7:9D:07:AE:00:5F:85:C2:BD:18:34:E7
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 01993380EE3DA6F6267EF16CC2235ADCD15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 12:01:51 +0000
Manifest this update: Wed 10 Sep 2025 12:01:51 +0000
Manifest next update: Thu 11 Sep 2025 12:01:51 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: 4ePo0CIZnzs4K/rBzpRDxD+ud2Bx/IAZ/PVNe6M27yo=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:ee:3d:a6:f6:26:7e:f1:6c:c2:23:5a:dc:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Sep 10 12:01:51 2025 GMT
Not After : Sep 11 12:01:51 2025 GMT
Subject: CN=0e52fcb9bc1f59ecc79d07ae005f85c2bd1834e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:c3:c1:ec:2c:bf:61:86:b9:4a:7e:36:80:
bc:0b:d8:df:e1:0f:98:79:92:1f:5d:05:7d:67:fc:
a3:99:93:59:82:31:07:98:d5:80:4b:3b:5f:33:ca:
9c:d0:b2:d3:60:b3:c7:90:a0:bd:e8:a8:9b:68:4c:
d6:31:ba:fa:25:2c:9c:cc:22:3a:63:d9:34:e1:1d:
af:be:ce:e2:4d:b0:b0:07:94:25:20:a5:f5:37:a6:
77:29:b9:e3:f8:a3:f3:ea:82:20:a3:21:cc:ec:97:
39:16:37:0b:f4:5c:c1:ee:66:0f:5b:16:37:92:6a:
95:33:95:56:59:8e:ef:aa:2f:29:2b:01:df:7c:22:
f5:a7:2a:d1:c8:b7:e0:5b:32:b0:5c:13:57:cf:e8:
a0:e4:4d:cb:3b:1f:3f:c1:bf:cb:be:74:c4:00:07:
5d:1c:84:ff:81:1d:05:7b:35:67:12:25:58:37:b5:
b4:98:63:fd:a8:88:b3:b6:07:70:f4:2d:ed:11:51:
e5:ab:cb:02:55:ee:6d:6b:b4:10:e0:a7:bf:4d:21:
d1:e3:cc:fb:cf:e9:be:84:31:4f:4e:38:51:dc:ff:
63:7b:54:90:ea:c7:53:ef:77:82:b4:fa:f8:f9:46:
59:d2:d6:35:7c:74:c1:1c:78:6d:92:52:8e:43:fd:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:FC:B9:BC:1F:59:EC:C7:9D:07:AE:00:5F:85:C2:BD:18:34:E7
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:47:88:f3:3b:9e:ca:17:76:63:6d:93:c8:3d:25:fe:4e:4c:
a2:b3:18:43:3e:1c:2a:c4:51:60:4c:87:b3:bc:80:47:5a:ab:
d9:1e:af:f8:1c:58:ca:2b:1a:e5:af:12:8a:ba:5a:c0:6b:01:
06:0a:f4:51:c3:50:fb:c5:2d:12:88:45:87:fc:9e:b8:e9:98:
65:10:68:0b:9a:2a:c3:a2:ea:5a:ed:4a:43:63:61:c5:4a:30:
e1:09:17:e4:ca:bb:5e:1b:74:75:b7:e9:1e:0b:44:85:02:dd:
ee:44:d2:8b:53:b3:23:33:bc:d6:69:e1:b3:d1:99:fa:c8:2f:
ab:00:b9:f3:03:04:80:6c:a1:2e:40:a6:06:d1:62:e3:62:74:
a5:dc:11:40:5d:69:7d:fa:73:3c:71:a9:1c:df:19:f2:e3:4f:
e7:d5:5d:17:37:16:9e:62:25:16:62:7e:01:7a:6c:3a:a8:3b:
17:48:94:b2:ef:ea:8c:fc:88:41:43:d2:60:67:cb:c3:58:8e:
e7:51:f5:05:d3:6b:e2:ce:31:6d:42:30:d5:90:b1:a9:a4:aa:
9c:f9:21:e3:51:76:c8:5c:2b:48:22:05:a8:8f:0c:2b:92:0f:
c5:12:63:de:11:06:e8:d8:31:6e:5d:8f:34:1a:bd:bb:a2:85:
9e:13:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:10 2025 by rpki-client