Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: WcZ+hEYNv1bJk/LG8Iu71klOduJ5yGV+iVu1wYdd3hY=
Subject key identifier: 33:5C:D5:6B:1C:6E:4B:E6:54:63:59:A3:CC:52:54:53:A4:93:D4:C9
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01993501501F193F582926B59A107A2415F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 19:01:42 +0000
Manifest this update: Wed 10 Sep 2025 19:01:42 +0000
Manifest next update: Thu 11 Sep 2025 19:01:42 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: CuCef5L0f6r7Dmc7Hv/5NYD7F8f0v5UmezCLpOSug/A=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:50:1f:19:3f:58:29:26:b5:9a:10:7a:24:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Sep 10 19:01:42 2025 GMT
Not After : Sep 11 19:01:42 2025 GMT
Subject: CN=335cd56b1c6e4be6546359a3cc525453a493d4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:bc:bf:7c:df:20:84:57:44:94:b3:eb:9c:
c4:15:f5:97:44:8f:7e:11:71:89:b4:75:cb:2f:16:
65:58:8a:9a:7a:21:ce:62:44:7c:6e:46:a8:a5:49:
96:4d:7d:6a:dd:10:2f:be:a0:3e:ae:50:dd:14:84:
6e:25:d3:bb:f2:db:de:6f:70:b3:2c:af:cf:99:35:
b6:34:df:83:af:c9:bc:7f:7d:bb:a7:10:43:26:dd:
b1:43:e4:d0:fd:41:6d:f1:c8:ae:38:9a:06:31:bf:
c0:97:a0:b8:c8:af:eb:fc:aa:2f:26:73:d0:73:bc:
24:12:92:8b:ed:c5:c7:48:88:b7:4c:f1:8d:ae:a9:
91:e4:cc:f0:ea:d1:24:4b:f7:40:b7:31:e5:40:3b:
a8:6a:f1:7f:61:eb:5f:c6:f2:e4:c1:26:71:cc:80:
82:49:2d:0a:3a:97:8f:c0:88:f6:c8:5f:e1:da:4b:
84:b7:a8:f7:a9:71:f8:44:46:21:bd:21:47:d7:36:
38:f8:d3:a0:ce:9e:27:07:e0:d6:12:39:b1:b5:ac:
14:7e:44:78:b2:3d:d5:eb:f5:35:83:34:95:f3:e2:
65:ad:5c:f8:cc:a5:59:33:07:cc:f3:11:1a:b7:fa:
7e:b0:53:d4:83:35:c9:c2:b3:ea:e9:06:8a:df:bd:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:D5:6B:1C:6E:4B:E6:54:63:59:A3:CC:52:54:53:A4:93:D4:C9
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:62:de:38:7c:b5:f9:b7:f8:28:5e:37:c0:25:87:91:d7:68:
7a:5a:b4:5c:19:4c:75:db:c4:c4:e9:81:fa:04:d2:a2:21:76:
cc:21:2d:07:0c:e9:58:fd:8e:f1:55:88:4e:f4:d4:8d:86:5b:
2a:f0:42:bc:25:1f:b0:09:8c:9e:81:b0:e0:02:27:0e:87:a7:
9d:d7:52:63:12:d6:36:df:81:66:a5:65:fc:97:e9:3b:62:e8:
04:cf:49:e2:e7:a1:8f:dc:73:e6:58:5b:e1:4d:25:52:45:7d:
ff:79:fa:29:79:10:f3:d5:f6:13:99:6b:15:50:09:c1:33:89:
2e:b5:27:b7:1e:47:15:6e:f6:48:dd:82:8a:67:2e:ed:bf:52:
f8:37:c3:a6:79:bc:0d:6f:fb:b2:1b:2d:4f:b8:93:ef:ca:54:
76:c3:af:f5:94:c9:34:0e:8e:2d:e5:f8:f5:5e:b6:23:a6:5f:
c1:f6:37:cb:82:ed:6d:7d:f4:d3:94:c5:f4:7d:0b:cc:de:2f:
6b:ae:6a:f5:29:37:84:43:1a:68:3f:59:8f:c3:07:41:9b:a1:
f1:89:78:da:fe:53:bb:23:00:bb:48:55:ae:0e:a8:73:dc:03:
55:0f:d9:33:01:b6:4c:d2:17:9f:23:70:68:1d:66:95:5c:f2:
84:21:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:43:55 2025 by rpki-client