Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: knk1xGgr7dGeTlEaZJ72zEuigYCjsnzC5jidtIIKGcU=
Subject key identifier: E6:C7:47:A1:84:DF:5B:23:2E:BB:41:15:63:19:8C:7B:5F:1C:B7:51
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 01992D46D9F3BC5D63979731974362413951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 07:00:41 +0000
Manifest this update: Tue 09 Sep 2025 07:00:41 +0000
Manifest next update: Wed 10 Sep 2025 07:00:41 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: GINzq7AKXgCU3og/4hvmUcq3E1J5Kyup7IV+kZvRh/g=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:d9:f3:bc:5d:63:97:97:31:97:43:62:41:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Sep 9 07:00:41 2025 GMT
Not After : Sep 10 07:00:41 2025 GMT
Subject: CN=e6c747a184df5b232ebb411563198c7b5f1cb751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:19:ec:99:8a:8d:13:d3:a1:fb:d4:cf:4f:
3b:14:9a:c3:bd:91:93:7a:3f:ca:57:3d:a3:32:cc:
ca:21:7d:24:b1:35:d1:c2:61:ae:5e:81:55:5b:23:
d3:a0:9c:d5:c1:35:05:03:6e:28:6f:01:90:18:36:
63:9f:93:d0:a8:8a:7e:01:be:61:d2:26:a0:8c:99:
be:61:39:c2:cd:b0:95:0d:ae:24:b3:2f:a2:56:e3:
8a:f7:67:3b:47:5e:3d:c9:79:3a:88:ae:ff:a9:32:
21:ed:fe:6d:db:57:f6:51:e0:58:02:48:03:95:00:
91:a8:d4:25:d4:b1:7f:ba:7b:50:81:18:2e:5b:da:
f1:a6:6c:cb:f1:bb:82:f5:07:34:41:fe:6c:ef:54:
36:f0:c8:f0:15:9b:15:ec:99:bc:99:03:6c:1c:80:
69:05:21:9a:f9:fa:a0:45:2b:41:21:19:a4:08:41:
15:7c:59:11:31:db:38:c1:b8:2e:94:c0:1b:a7:f4:
50:66:6f:f6:a9:69:3f:a9:f1:3b:77:2b:aa:0e:af:
0d:ea:d5:37:ea:f1:2c:02:8a:f2:1e:47:2d:cd:8e:
3c:87:dd:74:88:7e:43:83:f9:1f:94:f3:c9:9c:17:
68:b5:cd:c0:4d:ca:8f:39:a1:11:8c:d9:eb:2b:80:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:47:A1:84:DF:5B:23:2E:BB:41:15:63:19:8C:7B:5F:1C:B7:51
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:5f:06:4f:a9:d4:d0:4a:e8:be:5d:9e:a1:75:81:5f:12:
b1:c6:77:e7:43:41:72:90:72:e0:51:96:e3:45:d1:98:37:88:
0e:5b:f7:cb:2b:9e:30:cc:c7:c1:5f:5b:bf:12:27:7d:3c:ec:
9b:2e:0b:96:3c:4c:f6:f3:fb:13:f5:a7:61:2e:52:d9:51:b3:
00:4b:62:1a:d6:43:60:05:90:41:ec:70:d4:50:20:a1:45:6b:
81:80:4e:60:72:3e:d9:9d:ee:6f:a1:53:c3:c5:42:d6:29:59:
a6:1e:ea:cb:dd:cb:79:46:43:89:6d:f0:25:0e:fa:64:28:23:
36:8e:12:12:c8:9a:8f:f4:b3:81:19:b3:5a:b0:00:c1:2e:41:
9a:4b:a3:11:d3:0e:6c:b4:77:7a:3f:42:08:48:e6:64:eb:a2:
d4:91:d3:4c:5c:11:00:79:fe:c0:64:1b:7f:82:1e:3b:bd:de:
09:90:4a:2d:14:7c:d5:e5:07:6b:ce:3e:4b:45:c4:fd:7b:81:
ab:7f:1f:16:01:e4:14:ef:6f:ff:87:94:82:58:c3:54:31:5b:
76:5f:f4:49:bc:f1:40:69:bb:f2:a9:43:6d:8b:0a:ac:29:84:
85:08:1e:26:00:fa:d4:5a:2e:47:24:81:64:af:60:18:80:b5:
82:4f:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:44:15 2025 by rpki-client