Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: nIUWb9muyar70w5NsbRWMT8e8ZtF6rBIwIuA0gdSk1o=
Subject key identifier: DE:7F:B9:61:B9:A7:97:ED:08:CC:F0:BD:D3:89:DF:2B:E6:BC:7B:4D
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 01995B323AE6E8029F443C49154795C63CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 168F
Signing time: Thu 18 Sep 2025 05:00:42 +0000
Manifest this update: Thu 18 Sep 2025 05:00:42 +0000
Manifest next update: Fri 19 Sep 2025 05:00:42 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: 16DkZbZpugac1Y5HBaOWHxD1QBk0Kaf1GFWXhaPK89w=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:32:3a:e6:e8:02:9f:44:3c:49:15:47:95:c6:3c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Sep 18 05:00:42 2025 GMT
Not After : Sep 19 05:00:42 2025 GMT
Subject: CN=de7fb961b9a797ed08ccf0bdd389df2be6bc7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:bf:d2:ff:c6:73:cb:64:64:64:4f:db:d2:
ec:3f:96:00:1c:10:8d:a7:ec:7d:d4:f3:5f:a8:60:
12:7c:d4:fb:6c:6c:84:f0:cf:be:59:0a:ab:13:40:
64:79:ce:96:eb:d6:a7:ad:93:a3:b6:c8:d3:7e:1f:
69:8b:83:ce:d4:2b:87:ed:b8:85:73:bc:4a:c3:50:
e3:41:cb:e7:c4:17:c4:5e:75:78:19:e5:53:1d:fd:
df:fd:fa:0d:8a:ae:ae:e0:46:79:c4:22:43:13:c0:
c8:0e:c8:4a:6a:07:80:b6:c7:a4:a5:65:02:4d:fe:
d6:68:3d:9b:bc:9c:97:b4:b3:0b:46:81:29:d8:1f:
59:8f:7d:9c:93:8f:a8:0e:bb:d7:8a:be:30:c9:73:
45:49:95:e0:58:ce:3b:aa:c5:ab:b1:ab:bc:41:32:
9b:0f:5c:10:f7:b8:62:d6:4a:7c:df:2d:23:50:20:
65:89:d4:63:ac:a6:09:40:dc:cc:ec:69:cd:c2:00:
71:23:90:12:b7:2c:76:e8:0a:cb:fc:08:b1:c7:10:
ac:bb:48:af:20:59:6d:5a:f0:23:5a:94:34:a5:7e:
33:10:f8:ca:d2:33:68:62:37:86:c0:8b:3f:67:e2:
b0:96:ae:21:bf:8a:73:8f:17:77:e0:3c:46:27:6c:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:B9:61:B9:A7:97:ED:08:CC:F0:BD:D3:89:DF:2B:E6:BC:7B:4D
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:83:1b:3e:64:50:2d:ac:f7:74:80:0c:b4:b3:20:08:c5:a4:
52:06:eb:8e:c8:d5:08:43:ce:5a:23:57:6b:36:60:82:b0:2c:
cb:90:13:fb:03:d8:f6:bb:36:de:ba:4e:4f:b7:35:88:99:09:
66:f2:54:fc:30:5b:63:20:1b:7a:5a:85:69:94:a7:2b:91:1f:
5e:d7:03:65:11:ce:79:6f:32:4c:e1:50:cb:6c:b2:ee:90:55:
81:42:27:ae:d3:7d:fe:d3:f9:c9:45:45:af:aa:f2:cc:e4:e3:
db:26:db:dd:2f:55:1f:5e:2b:30:6b:aa:81:59:e0:23:6d:b0:
11:21:af:7d:ae:81:ff:8e:13:d3:9f:af:10:ad:b8:8d:63:1a:
72:f4:4e:58:7c:a0:ce:6a:e8:e2:ee:fb:48:ff:e2:bf:b8:6c:
6e:84:51:45:9b:08:dc:5c:da:f1:98:73:ab:f8:68:8e:24:6c:
cd:bd:b4:d3:a8:29:7b:92:76:b2:28:c0:cc:31:01:fd:40:dc:
c9:8f:c6:3d:85:d7:3c:1f:4a:00:c0:bb:bb:e1:e4:13:a2:bb:
cf:cc:fa:cf:84:b6:06:76:17:66:6d:ac:6d:48:73:28:27:ff:
cc:a6:09:e0:11:fd:3c:54:c1:77:2d:73:4a:5b:86:a9:89:eb:
62:c4:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:26:09 2025 by rpki-client