Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: qEUgIQ+K3d8QUVode1vIxuvjgZueX6eQ00i24fMwH5c=
Subject key identifier: 13:C3:28:03:88:7E:3E:0C:C5:E8:D3:86:C4:8D:62:D1:19:D9:98:37
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 019917649AE8F1EE71F8256D41BCE8FB6929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 01:01:33 +0000
Manifest this update: Fri 05 Sep 2025 01:01:33 +0000
Manifest next update: Sat 06 Sep 2025 01:01:33 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: BwP6DmAbd+ML5WeMmz3wEV6Eq6ywIMkrzxSRWJB8wyo=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:9a:e8:f1:ee:71:f8:25:6d:41:bc:e8:fb:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Sep 5 01:01:33 2025 GMT
Not After : Sep 6 01:01:33 2025 GMT
Subject: CN=13c32803887e3e0cc5e8d386c48d62d119d99837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:63:b1:ba:f8:5e:da:6e:11:0b:da:7f:a9:
97:fb:b8:28:74:24:96:3e:7f:39:a8:56:ba:e1:ca:
9a:68:29:1a:7b:14:c1:95:15:6c:ae:63:a6:5e:12:
78:15:b7:57:73:9e:2f:e3:c6:41:1c:f7:36:37:a4:
42:7b:8b:e2:c5:fa:d7:1e:9f:4c:0b:d2:0a:55:b4:
d5:8c:fb:27:ea:a9:de:c0:24:ec:f1:92:32:00:83:
bf:65:a9:ad:a6:24:fd:e6:6f:75:6a:be:bf:3a:0a:
3f:92:02:1a:49:df:57:a1:3a:a9:be:88:32:38:95:
6a:a1:79:df:6f:29:4a:9f:19:3c:30:a6:1c:60:b0:
91:9c:a8:56:9f:f4:24:fa:15:67:7b:54:bd:aa:04:
29:a2:be:ca:1b:75:e2:1a:b9:61:61:b3:bf:01:58:
df:d7:7f:a1:e4:23:69:ab:aa:98:d7:c9:62:a2:86:
ae:a0:1d:19:15:58:fa:d8:ff:ad:66:9d:86:67:e4:
4c:54:9c:21:40:d8:1f:66:5a:eb:be:9a:68:7b:34:
21:54:08:ac:0b:55:7e:6b:c0:71:70:86:49:26:cf:
46:48:c2:fa:37:5e:b4:4a:23:52:1f:eb:79:13:0e:
c8:9e:94:bf:40:90:62:08:f7:9c:bb:cd:9b:4a:fd:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:28:03:88:7E:3E:0C:C5:E8:D3:86:C4:8D:62:D1:19:D9:98:37
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:ed:b3:79:64:09:ca:4d:fe:17:15:e2:70:e9:7c:8b:25:
63:c1:7f:18:5b:c0:ab:74:3b:40:66:bb:a2:57:d2:81:04:53:
f0:53:bb:56:f0:86:4d:ce:4b:11:a4:44:2a:5e:10:31:c0:73:
a0:ca:eb:44:c0:d6:8c:7d:e1:88:54:af:24:81:91:46:66:be:
23:9f:97:4c:1e:20:cf:e6:a6:e1:9e:46:19:3c:38:26:15:5c:
a0:0b:a0:6c:c5:5a:1e:15:53:72:d9:fb:d9:21:58:36:27:05:
10:4b:30:37:09:d0:61:61:e7:70:78:ef:42:2f:94:92:ae:c5:
b7:ab:95:79:8e:a2:0a:db:66:a2:4c:52:1d:8e:90:b7:a6:8f:
d2:2f:70:5e:d9:1c:1a:08:7f:38:5a:5b:9b:08:5f:b6:ca:16:
a5:6a:28:79:e4:77:e8:3b:0a:43:c6:11:9f:e4:c3:62:7e:15:
d4:c6:c6:e5:29:4c:c1:30:c4:25:ae:a4:a7:72:4c:be:62:4f:
50:4f:11:c5:c0:c4:8f:84:03:bd:dd:1d:64:b8:69:a2:9e:a9:
5a:19:0d:25:87:99:eb:5f:8e:69:4d:35:56:a8:7a:90:26:4d:
3f:cb:6f:5d:d6:91:e5:81:7a:87:ca:8b:6e:6a:65:d4:93:cc:
4a:b9:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:30 2025 by rpki-client