Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: pDvSD0kLFVQ5+9MFfFZdAzsVDVimpb8Wy/1/aXbnE70=
Subject key identifier: 88:33:2F:47:39:1D:CA:3C:CC:E7:3E:EE:E8:8B:73:D8:BC:57:AF:BE
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 01992FDA25C364E514032CC54A5673805759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 168B
Signing time: Tue 09 Sep 2025 19:00:49 +0000
Manifest this update: Tue 09 Sep 2025 19:00:49 +0000
Manifest next update: Wed 10 Sep 2025 19:00:49 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: TmtjQUtWvbLBajEjT3AB0Xywgunwr3aZZ0NtQ9eeoco=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:25:c3:64:e5:14:03:2c:c5:4a:56:73:80:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Sep 9 19:00:49 2025 GMT
Not After : Sep 10 19:00:49 2025 GMT
Subject: CN=88332f47391dca3ccce73eeee88b73d8bc57afbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:34:09:ce:15:3e:9a:cb:3a:ce:3d:3b:08:
e6:e6:10:ff:27:d1:09:e2:42:e4:a6:61:dd:9e:73:
c1:4e:de:bf:f8:a6:ae:ae:c2:f9:1b:33:48:60:f7:
a0:38:a7:dd:6c:73:43:34:76:d5:9f:4b:47:21:0c:
a2:59:96:1b:08:56:86:36:98:07:70:a8:d7:e1:d2:
1b:51:ae:94:3f:13:c2:ee:d1:2c:b1:3d:fb:54:30:
b5:e6:96:3f:28:55:16:79:38:31:f0:ce:99:e5:80:
12:8b:f4:56:c0:94:85:2f:c0:29:26:0e:4b:46:63:
c4:c6:5a:35:97:45:83:59:f7:8e:43:af:2d:3d:32:
69:3f:b3:95:1f:12:46:e3:65:64:d9:57:27:44:c6:
56:a0:3d:93:ce:0f:b6:99:3a:f7:2e:cb:ea:38:6a:
66:ad:58:1c:e1:e2:ec:40:36:78:59:59:95:2f:3e:
d1:32:7e:86:09:c6:56:06:ea:5b:91:19:6a:ce:a3:
71:d9:f5:41:d7:3a:74:c3:62:30:be:90:16:97:bd:
bd:e2:7c:13:75:7c:d5:f9:bf:ec:be:fd:69:e5:c4:
ea:9b:88:2d:ee:f3:2b:5c:0c:5b:60:0d:8f:0c:2f:
77:10:26:16:ff:fb:0e:18:ab:00:51:a6:ff:8d:84:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:2F:47:39:1D:CA:3C:CC:E7:3E:EE:E8:8B:73:D8:BC:57:AF:BE
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:4a:5c:fb:d4:9c:10:e9:45:b7:66:81:39:35:51:05:3f:
48:98:37:c4:d6:25:eb:5d:7b:7e:5d:96:55:aa:26:18:54:f8:
38:5b:78:9d:77:e9:ae:b9:06:99:e0:ca:01:9a:b5:bf:c7:78:
83:06:e7:f0:d5:70:e9:52:47:5e:a5:5e:fb:03:41:3d:87:29:
8a:e0:a0:f1:6a:c5:e1:b5:37:e3:18:11:27:61:eb:a1:4a:54:
d2:e7:3a:ed:cf:f2:eb:ee:d1:6e:fd:bd:b0:f5:54:db:62:52:
67:43:dc:31:6f:90:af:3a:1e:a4:6f:33:4a:97:41:7d:00:e4:
e9:09:98:61:ef:25:49:42:62:4e:a0:06:7e:ee:c2:fd:31:c4:
09:a0:d9:8d:76:02:cb:ed:0a:9e:86:70:6a:15:e9:50:e2:d9:
57:33:cd:e6:9e:06:7d:1f:b4:8b:6c:76:63:f3:e9:a2:fc:ef:
03:88:ed:3b:89:fe:8f:aa:27:f8:30:5e:fd:f1:c8:c2:44:56:
6a:20:bc:0c:de:ab:10:93:0d:7f:b0:78:dd:59:d9:f6:a0:a2:
ff:b5:b0:7f:9a:07:2a:eb:30:07:21:a4:67:d6:bc:29:5f:3b:
a3:cb:d7:6b:79:90:72:0c:11:12:d4:24:03:f7:d0:4c:e6:92:
b9:2f:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 02:44:12 2025 by rpki-client