Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: ww+3mCPsMmwX+ObfMj6/kCmg9WNdwnrmOeE65lZ4VoY=
Subject key identifier: B5:CE:88:A1:86:0A:53:96:B7:16:8D:90:31:C4:8F:47:06:90:DC:B1
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 01993424BE46A4319F196D38675C786B8A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 15:00:47 +0000
Manifest this update: Wed 10 Sep 2025 15:00:47 +0000
Manifest next update: Thu 11 Sep 2025 15:00:47 +0000
Files and hashes: 1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: y9vpTTsEo1GN7PvwvYmcCwGTcqUCgU9Lw/UAJMsCSOU=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:be:46:a4:31:9f:19:6d:38:67:5c:78:6b:8a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Sep 10 15:00:47 2025 GMT
Not After : Sep 11 15:00:47 2025 GMT
Subject: CN=b5ce88a1860a5396b7168d9031c48f470690dcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:df:30:4b:74:09:3c:65:1f:78:c0:18:11:
df:fc:ae:c2:24:24:2d:8f:e0:b6:51:0a:46:7f:b9:
d4:21:6d:62:d5:1f:7f:29:28:ae:d1:2b:a5:12:42:
df:65:03:a4:27:6e:03:5a:f4:17:3e:da:c6:ac:df:
71:a2:34:ff:df:dd:e2:b5:d2:b3:4f:24:24:21:ad:
13:67:9b:f8:8f:4f:8a:fe:4f:db:cf:e6:53:0b:9f:
09:ad:8a:4b:23:7c:ee:64:fd:ad:7f:4b:1e:e8:03:
84:01:8b:6a:e6:6f:90:65:1b:a8:67:57:41:25:5b:
96:88:6b:91:e3:cd:13:31:d0:5c:39:9a:5d:89:7b:
6e:73:b8:d0:f5:8f:c8:46:0f:25:b0:51:c3:e5:fc:
20:a6:8d:07:46:56:85:ab:b1:07:a7:e1:cc:dd:d6:
0c:99:bf:60:5b:df:ce:b8:c6:11:f8:04:89:8b:0e:
1c:8a:ff:19:6d:17:80:42:89:f0:be:5a:6e:18:6d:
13:cc:4f:d5:93:bf:9f:00:a6:df:1e:00:bd:24:9f:
17:96:be:b2:47:64:b4:26:d0:b9:aa:11:56:b2:00:
80:29:27:fa:a4:b5:f6:39:bc:79:9d:bb:5c:de:b6:
c6:2c:5b:0b:a7:ea:98:2c:bd:02:f9:c2:9c:15:09:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:88:A1:86:0A:53:96:B7:16:8D:90:31:C4:8F:47:06:90:DC:B1
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:b5:fb:d1:78:ac:b2:00:60:81:3a:b7:d7:23:76:b7:86:
d2:fb:58:55:fd:7f:ff:bc:3b:6a:5f:1a:27:f8:b7:eb:6f:68:
e8:36:12:fe:33:34:f8:4d:d8:3b:fe:93:64:81:55:e4:31:6f:
f8:a0:71:a6:ac:e7:8d:cb:01:76:49:99:6f:b5:40:ff:ea:34:
b5:12:da:10:d6:02:ff:1c:ac:27:b4:a2:b1:30:5b:57:1e:80:
98:e0:3e:87:1a:de:a5:26:62:ca:1d:3e:7b:f2:74:0a:dc:1b:
44:67:1b:dc:32:5a:c1:1b:95:22:13:c7:f1:24:87:c5:f3:ba:
31:10:d2:92:b1:24:2a:c5:1a:f5:2c:ec:23:48:1f:74:97:3f:
f7:49:29:41:58:87:01:fd:9a:91:71:44:82:aa:45:07:83:76:
d8:17:94:4d:e6:5e:a2:19:e7:92:47:59:cd:9d:b5:ec:71:c0:
09:9a:b7:08:89:40:84:af:95:7a:49:3f:1c:45:d3:02:35:a5:
c5:21:12:7f:78:39:a0:89:ee:df:f2:3b:a9:12:d1:3b:f2:1e:
b6:3d:93:17:79:21:11:c2:45:71:e2:f7:97:fc:94:2b:5e:b8:
3b:7b:9f:4b:57:f3:12:18:42:c1:d7:ad:50:27:7b:44:33:94:
fc:8b:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:31:33 2025 by rpki-client