Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: D+NXICF0ouE0Qrl9i0jQTjU4Xj6270Fy/3USJ0ZoKuw=
Subject key identifier: B7:42:0E:D4:FD:52:C2:BB:42:A3:A6:48:1E:FC:51:08:15:2D:4A:A1
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019936134C03F757555720CA127ADE839A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 00:00:58 +0000
Manifest this update: Thu 11 Sep 2025 00:00:58 +0000
Manifest next update: Fri 12 Sep 2025 00:00:58 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: om/6898VCOKcJBKVO0P3gvrSKGoOPHgJtpETsxxjNVY=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:4c:03:f7:57:55:57:20:ca:12:7a:de:83:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Sep 11 00:00:58 2025 GMT
Not After : Sep 12 00:00:58 2025 GMT
Subject: CN=b7420ed4fd52c2bb42a3a6481efc5108152d4aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:8e:31:93:4d:9f:00:cf:31:ef:d7:7e:35:
b2:1f:75:8c:45:d0:83:87:8b:62:5d:bc:6d:0d:12:
27:dd:30:c9:27:0a:21:e6:ca:6d:99:d9:4d:ae:bc:
02:91:13:34:a8:b8:e3:18:d0:ce:0b:16:81:98:b3:
03:79:a5:62:be:14:53:8b:30:d6:5e:57:16:f3:93:
46:40:92:8e:59:7f:2d:4e:f1:9a:96:69:a3:c8:71:
61:d9:8f:49:ab:6e:c4:fd:14:cd:e4:14:97:3c:67:
4a:8b:a3:7d:b1:11:03:d5:1a:08:ef:90:67:63:de:
aa:47:ee:ea:34:9a:c4:6c:4f:64:d3:f8:9f:4c:be:
00:be:40:f4:c7:5a:2b:69:a9:d1:b7:68:6f:31:c3:
1c:3d:4a:28:16:aa:96:ed:65:c2:89:65:f8:ce:93:
fc:b5:e2:fb:f1:44:0d:ae:e9:69:9d:18:df:f1:db:
14:44:db:c6:71:de:84:f5:af:9a:83:90:27:52:b7:
22:2d:f6:9f:05:b5:f6:74:30:fc:02:f1:bc:d7:18:
d8:ea:8e:4d:e7:8b:5a:72:6e:b5:40:43:78:5e:17:
0f:6e:84:88:62:03:e6:60:14:b2:d1:e6:6f:58:b9:
91:96:74:81:78:c9:15:a5:46:82:9d:ec:99:92:54:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:0E:D4:FD:52:C2:BB:42:A3:A6:48:1E:FC:51:08:15:2D:4A:A1
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3e:31:fe:ec:22:17:9d:c1:97:e3:56:38:f4:f4:2a:18:cf:
50:cc:16:29:55:24:58:b2:71:da:84:3a:45:4d:a1:09:b3:7e:
93:3b:33:4b:1c:54:97:60:7b:ba:e2:97:6d:04:ee:ba:a7:f3:
14:46:6d:47:67:34:b0:5a:67:45:c1:35:3b:fa:45:d8:f8:d6:
5e:7b:f0:fe:38:1b:69:7a:20:ac:53:cf:db:ed:ce:17:d1:8c:
6f:e6:f3:8d:ff:97:5b:46:75:15:69:cb:fa:40:bb:b8:87:d1:
c4:a8:c7:bd:94:a4:26:dc:94:d8:b6:bd:c3:cf:6a:93:53:d3:
da:f7:11:a3:f6:2b:1b:1f:c8:94:10:ef:58:cf:2d:f0:66:6c:
37:a2:fa:dd:bb:cc:53:0d:ee:b8:49:3b:55:1f:69:ba:59:33:
c1:7d:e7:0a:ce:7d:55:d1:d8:57:18:d9:63:7e:41:02:19:af:
6e:9f:cd:9d:7d:dd:33:51:0f:20:6b:9d:34:f2:c4:e1:61:30:
fc:6d:3d:40:19:f2:64:b3:ea:c7:21:1d:33:bc:ee:83:ef:61:
23:a8:59:f3:a3:72:8b:61:27:f2:1b:50:c5:bc:0f:f6:38:81:
e4:d0:04:03:df:7c:22:4e:c5:cc:06:ca:a8:f8:2f:17:9b:b2:
4d:ee:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:09:58 2025 by rpki-client