Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: aVaEbNZBKso3uBiFRGSruTmhrQXQVZuWbR0CnIyq8a8=
Subject key identifier: D4:25:B1:32:0A:2B:21:73:EA:86:33:72:95:3C:5F:5C:2D:07:62:91
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 0199345BAC2FC3503C9BB07CB54BB9E8428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 160D
Signing time: Wed 10 Sep 2025 16:00:47 +0000
Manifest this update: Wed 10 Sep 2025 16:00:47 +0000
Manifest next update: Thu 11 Sep 2025 16:00:47 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: Gwmd5PMUjyKVACqRT/oE9mtbje5NLc0QuXZhm8wJ6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:ac:2f:c3:50:3c:9b:b0:7c:b5:4b:b9:e8:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Sep 10 16:00:47 2025 GMT
Not After : Sep 11 16:00:47 2025 GMT
Subject: CN=d425b1320a2b2173ea863372953c5f5c2d076291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:48:3f:95:52:f1:bc:8b:a1:e0:3b:75:75:
e5:64:d8:a9:0f:69:58:c0:26:c1:aa:9d:9a:0c:31:
7c:de:72:6a:33:12:20:6b:b7:05:a4:45:38:70:4b:
49:13:fd:ee:e7:e7:63:50:b1:0a:d6:2b:46:0b:81:
c3:83:89:ee:4f:03:43:b3:98:9d:03:86:01:12:2e:
96:82:73:8f:c5:4e:21:79:fe:22:42:e5:67:5f:5d:
86:30:38:0c:14:14:a0:c8:ff:2f:e9:f3:a3:a0:1c:
c9:ac:cd:bb:c9:e1:3c:af:99:a4:9c:ee:03:ce:bd:
da:36:64:60:86:8f:de:1d:e3:18:ec:cd:53:95:b9:
a6:a7:cd:a6:99:9a:69:92:28:25:73:5c:0f:df:f3:
ee:0b:b3:46:10:a9:31:5d:fe:1f:1a:3f:06:be:55:
d4:68:f4:a6:7c:59:3c:e9:d0:a9:0b:23:8b:af:40:
57:f4:e0:33:4a:89:e2:a0:16:69:c5:54:53:9c:76:
f1:71:85:55:1f:7e:36:ab:5a:9e:27:1b:e0:9a:83:
c2:c0:98:63:23:a3:10:f1:85:e6:9a:13:0d:e8:f5:
85:cc:48:07:82:ae:ef:69:59:12:7d:07:ed:83:7e:
69:07:8d:aa:d4:f4:6c:5e:2a:f4:3a:9b:8b:6f:d7:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:B1:32:0A:2B:21:73:EA:86:33:72:95:3C:5F:5C:2D:07:62:91
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:ae:a8:5d:d1:9b:7a:bb:66:0d:bc:06:9d:2f:ef:43:b1:
d5:9d:24:3b:13:ce:d7:15:b4:ad:19:2d:ea:e9:1e:68:3e:7b:
78:e3:c6:ca:6c:c8:68:32:bd:0d:de:57:27:53:77:a1:ac:ba:
14:e2:a5:4f:ee:89:85:53:82:8a:72:d3:16:b2:7d:13:12:92:
46:fc:08:06:b1:c4:93:cc:a7:e5:85:45:64:3e:f4:fa:ba:97:
6c:c5:50:9f:ae:db:9c:9c:26:c0:f5:54:64:83:ce:c8:45:38:
80:27:04:89:02:16:c7:46:8c:97:22:98:22:0c:df:81:0e:e9:
a1:dd:a8:23:f9:a3:f2:a4:7d:23:12:8d:2d:06:05:71:74:cf:
3d:5b:af:fa:87:28:61:1c:62:a6:bf:ef:78:f1:3c:e2:0d:5b:
8e:f0:0d:58:cb:f0:77:81:49:9e:e5:e8:7e:e1:f3:53:e8:53:
e2:64:ba:3c:0a:63:94:ca:34:1d:58:43:a9:1f:36:b7:1c:90:
77:14:9b:9f:79:02:b1:f9:56:d2:31:7f:bc:50:a6:c5:24:57:
8e:71:22:23:a3:1a:e5:26:31:ab:70:34:2e:bf:6a:7b:d8:39:
81:3b:ba:79:02:8e:f1:60:ad:d7:7c:4b:4f:92:31:56:d8:8b:
4b:e8:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:46:52 2025 by rpki-client