Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: eVaYe+5fiPbS7lWUqs4ppgNIUR0g2Wp7JR5nFN2161A=
Subject key identifier: B3:C0:B9:01:62:DB:85:C8:CC:60:4D:10:8E:86:60:47:4D:43:64:11
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01992B59320668D03FE57ADC47C145592B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 167B
Signing time: Mon 08 Sep 2025 22:01:29 +0000
Manifest this update: Mon 08 Sep 2025 22:01:29 +0000
Manifest next update: Tue 09 Sep 2025 22:01:29 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: 7/iWPFe7PrvsBcThX29J+qbN7m/+mm1lyyboONSnXX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:59:32:06:68:d0:3f:e5:7a:dc:47:c1:45:59:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Sep 8 22:01:29 2025 GMT
Not After : Sep 9 22:01:29 2025 GMT
Subject: CN=b3c0b90162db85c8cc604d108e8660474d436411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:c8:ec:48:25:95:11:cc:6d:10:1b:9e:30:
be:f0:7c:e6:46:51:84:b5:c8:99:80:e0:32:bc:7b:
18:90:88:a7:6b:2e:7e:b3:2b:62:bd:65:9f:d6:9f:
51:5d:6e:17:ac:f2:96:0e:b9:a7:89:c9:41:2c:04:
01:66:50:a9:c6:24:e8:a4:6e:13:fa:ae:fe:93:d5:
14:f4:bd:58:2a:d6:5c:9d:78:a1:7a:96:85:cb:90:
81:3c:f1:6f:04:c2:68:73:d9:cf:7c:8f:a0:18:8f:
9d:82:20:81:33:6a:0e:f8:88:a1:1c:67:c4:f9:07:
51:25:97:75:fd:f3:72:3a:2a:45:c7:33:a8:a5:eb:
19:9f:1b:4e:8c:6b:60:82:40:1e:1f:32:f0:b8:d0:
b6:dd:38:33:a9:02:56:a5:c8:ae:c3:e3:90:3b:00:
0b:e0:76:7f:65:81:41:95:af:78:04:92:f2:cf:5c:
f7:c3:24:be:11:8f:01:68:c2:82:25:30:2e:0e:01:
1b:4c:19:1a:f8:63:9c:00:cb:d9:21:dc:f5:e7:b8:
e0:0d:a9:79:85:56:c5:59:c5:ba:2b:d0:cc:8f:99:
c5:f9:66:77:8c:6e:b2:ff:b9:64:ac:01:9c:22:00:
87:c0:6c:f2:86:69:09:47:35:2f:25:1f:b6:b8:cd:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:B9:01:62:DB:85:C8:CC:60:4D:10:8E:86:60:47:4D:43:64:11
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:e3:5d:46:5a:0d:49:3c:3b:db:58:4e:20:d9:80:b5:09:
06:7c:62:4b:a4:87:28:9f:2f:5e:d6:a6:b4:2a:8d:f1:81:f3:
89:02:67:a6:3e:a6:69:aa:c1:b0:87:c2:21:f7:5e:be:93:1c:
7c:a2:4c:f4:db:4a:a5:fb:2c:90:c9:de:87:8b:0b:9d:9c:69:
72:a0:bc:eb:a5:2b:2a:69:9e:0d:87:16:7b:02:e6:20:8a:c0:
78:e2:b4:7b:f4:a5:86:9c:e7:0b:26:e7:0b:5a:10:bd:fe:0e:
b1:f5:03:5d:ce:2e:9d:d6:9d:69:a3:a9:af:fa:82:16:86:a9:
7f:79:3e:40:85:da:7f:e9:da:66:86:e2:ce:4a:1f:e1:af:2b:
37:2e:76:51:04:ca:42:ed:40:24:18:50:bb:64:96:80:2c:05:
47:39:24:63:31:2d:d3:35:79:79:eb:6a:f8:1e:4a:56:5d:c2:
4f:82:c9:1d:a3:69:bf:58:a2:2a:bb:1d:8a:1a:1d:fd:b4:a5:
07:73:0d:e2:d7:91:79:76:c8:e6:28:ae:b2:3b:95:c9:ed:34:
43:96:09:d7:5e:cf:fe:0c:26:94:f0:2d:0f:38:fe:1b:d7:a7:
98:38:42:34:60:c8:77:43:bb:b3:b8:f2:21:95:91:4a:ee:dd:
c0:3f:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:30:31 2025 by rpki-client