Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: quFE0WvMLQEwFPk7AQHx6FIhVGdPJGohADYFDlGjbX0=
Subject key identifier: D9:9A:01:96:C9:62:E4:54:36:E2:22:21:03:18:B6:6E:23:65:36:6F
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0199315A88D3AF8823347E5C429CE529CDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 02:00:40 +0000
Manifest this update: Wed 10 Sep 2025 02:00:40 +0000
Manifest next update: Thu 11 Sep 2025 02:00:40 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: KzuS2LPkCu54AosQ0MIB2D7hEnSqVRMCJX1ZsRjmXDs=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:88:d3:af:88:23:34:7e:5c:42:9c:e5:29:cd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Sep 10 02:00:40 2025 GMT
Not After : Sep 11 02:00:40 2025 GMT
Subject: CN=d99a0196c962e45436e222210318b66e2365366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:0c:8a:7f:e2:a5:84:0c:88:8c:78:79:b3:
8d:c3:af:f8:63:91:45:a1:62:e7:86:02:2f:d3:67:
45:dd:3a:6b:c3:6c:3c:6c:c1:5b:df:84:d9:c4:d8:
8d:50:13:74:7a:f1:b1:c7:7d:56:5b:48:5c:fd:52:
61:bb:17:36:52:cf:1b:3e:d1:7e:1a:3c:25:01:1e:
e9:e6:57:93:4b:c6:52:00:ca:c5:4a:d2:2f:46:c6:
fc:5e:99:e3:c5:b4:d8:a3:f0:26:fc:d4:29:2f:ba:
99:e5:c3:b0:e3:ea:04:11:0d:48:6b:e6:34:c3:93:
f3:c2:f3:90:d9:a2:20:87:44:64:e4:af:ab:af:f4:
8a:02:d3:35:1f:02:74:43:c1:19:da:d8:36:37:9c:
f0:e0:f3:0d:9c:92:9d:8a:2e:ad:f2:44:29:2c:ff:
3e:0a:01:a5:79:c3:72:0d:46:9b:4e:db:ca:bf:ed:
53:66:23:b2:c9:70:fb:eb:b8:85:f3:59:be:d8:b9:
60:9e:ef:2c:e8:d2:56:e0:d0:28:cd:1e:34:39:40:
2b:4d:a4:39:c2:20:e7:01:f5:51:c1:73:76:7b:7d:
bb:7a:f1:23:0d:7e:f5:75:a7:69:99:ae:73:d5:85:
b3:9a:d1:d7:ee:0a:e3:28:08:72:28:70:5a:75:f8:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:01:96:C9:62:E4:54:36:E2:22:21:03:18:B6:6E:23:65:36:6F
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6c:25:ae:9b:7c:27:3e:0c:39:09:19:86:b8:28:0b:0f:95:
c0:d9:4b:5e:cf:dd:f5:b2:6f:1c:a4:84:87:8b:98:2c:b7:77:
69:10:36:62:de:36:db:a0:69:b1:74:3e:42:e6:2c:d2:bd:c2:
bd:c7:c1:d3:a4:3d:7c:49:d7:50:aa:05:0a:bd:8a:f3:19:62:
b8:0b:a8:93:61:47:85:a6:c8:c0:f1:6a:c0:48:8d:c1:78:79:
38:18:5b:e5:43:7e:1b:6a:b6:dd:7a:c5:78:7c:fb:fd:e7:aa:
66:62:e4:56:2a:9d:bf:57:8b:bb:34:77:2f:27:4b:76:fb:a0:
2a:d1:3d:f4:78:0c:5a:68:52:06:81:62:09:d8:a4:68:c9:11:
8e:59:36:60:66:bc:51:a6:2d:37:f0:1a:db:3e:e7:02:0a:27:
87:95:2d:ed:b6:56:44:51:3b:89:a5:fd:ce:82:8b:b5:ba:b2:
be:4d:d8:8e:b0:1c:96:6b:3d:7e:1b:f9:d9:a5:5e:b9:21:de:
31:4b:d8:fa:f8:07:25:c1:92:25:e4:02:9b:b7:7d:79:d1:3a:
8c:26:e0:66:93:12:cd:f5:e0:12:5b:7d:d6:ba:e4:b5:67:b5:
e0:48:0d:fc:e7:76:aa:84:6a:a4:dd:5a:4c:f1:63:dc:f1:85:
f3:c8:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:01:06 2025 by rpki-client