Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: j4Oi/mzBMGcYKgsQqQasLFpDrR/vzMCSO0tVeKA/RYM=
Subject key identifier: DC:F4:16:72:1F:62:C8:F1:1F:07:0E:DD:0A:BA:75:B2:16:AF:E1:FB
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0199172D08E016599080DD8ADC50CDBF1EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 00:00:51 +0000
Manifest this update: Fri 05 Sep 2025 00:00:51 +0000
Manifest next update: Sat 06 Sep 2025 00:00:51 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: zQCrkS5X0EgY6Wy4fDBF1GwcYQWPRjjTcXPWK74TQ14=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:08:e0:16:59:90:80:dd:8a:dc:50:cd:bf:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Sep 5 00:00:51 2025 GMT
Not After : Sep 6 00:00:51 2025 GMT
Subject: CN=dcf416721f62c8f11f070edd0aba75b216afe1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:2d:ab:77:ed:b0:bb:94:74:05:d4:6e:30:
12:fe:1d:fb:6b:7e:df:32:6b:64:fb:81:7a:0d:76:
f9:07:e2:1f:0b:f1:2e:e9:a3:e8:12:11:f0:eb:4e:
fc:b4:16:d9:66:c6:85:29:39:64:b5:e3:c6:5e:ab:
b5:76:aa:08:84:a0:87:b0:2b:e0:1b:b9:2c:86:8a:
fc:9d:0c:8d:f9:29:02:d0:da:61:0e:29:00:49:21:
f9:8b:3b:ce:5f:4f:a7:6d:fe:65:04:a4:a6:d3:7f:
8f:9f:2a:24:3b:5a:a5:28:bc:f7:c2:2f:c0:75:51:
10:6c:a5:ce:11:2d:b0:09:54:b4:28:ba:dc:44:ec:
82:98:0e:bc:0d:db:8d:77:ae:d4:a8:e2:76:76:f1:
bb:75:da:ed:d4:68:ec:e1:bf:e6:07:26:0c:94:d4:
93:28:e7:35:c3:9d:d2:a5:ce:7c:6d:6e:44:64:69:
e6:b5:9d:32:65:2f:26:fb:2b:3a:86:25:81:96:eb:
1a:71:3d:8d:16:b7:f2:21:f7:d9:af:e6:49:81:a3:
dd:5e:fc:0d:1f:58:33:cb:84:99:d3:ed:8e:bd:fa:
ef:7d:b2:7b:ac:07:11:06:f1:fa:ef:49:42:b2:e3:
ae:d4:5a:c2:57:4e:a5:8b:d4:75:07:f3:2c:53:af:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:16:72:1F:62:C8:F1:1F:07:0E:DD:0A:BA:75:B2:16:AF:E1:FB
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b1:84:5d:d5:67:66:fe:83:c7:72:c4:fc:38:2c:ef:78:23:
84:f8:d9:40:e6:63:e7:0d:fa:80:5c:67:af:87:47:3c:c1:09:
97:07:b7:7b:6b:67:f7:f6:e7:f7:ca:ec:07:cb:6b:54:f1:7d:
69:f7:0f:aa:c2:69:d9:24:d7:c3:bd:c1:3a:34:b9:e1:dd:21:
d6:76:0e:4c:8d:c5:17:9f:77:94:3d:57:c5:61:a9:97:a3:d8:
27:8f:6b:5c:96:40:63:dd:69:a3:88:27:ff:7f:95:62:c1:08:
ab:93:80:0c:ba:2c:31:d3:b0:1d:a9:24:fe:28:ab:90:c9:4c:
a6:f7:af:28:a0:bf:98:69:b4:34:21:6b:0e:3e:3a:5d:b6:d7:
8c:45:db:b4:22:77:0a:c4:de:7f:47:6b:b4:28:4c:b5:15:bd:
7b:e0:d7:d8:48:a7:61:1f:48:92:5c:fa:60:df:d1:af:79:4a:
54:0d:2c:14:a7:2e:d6:d8:0c:80:6a:61:d0:98:ef:be:7a:b7:
0d:44:ae:0d:9a:6e:27:ce:d2:7c:dd:62:43:fe:7c:21:9d:bf:
67:b1:7e:2c:75:7b:dc:97:e3:37:17:a2:48:08:24:3c:89:dd:
52:b2:14:ab:3f:3c:b4:80:88:32:fd:af:7f:61:c8:7d:fe:61:
6e:7b:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:17 2025 by rpki-client