Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: fDKBsR+EbjQhjmj8TkNHdevVeQ8PHFfbg6FN5wIYgZI=
Subject key identifier: 56:CB:1C:3D:6E:79:62:80:70:1B:B3:1E:58:39:C0:D8:5B:23:16:DF
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 0199356DF4031AADDB613E3E233A1B49E680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 21:00:22 +0000
Manifest this update: Wed 10 Sep 2025 21:00:22 +0000
Manifest next update: Thu 11 Sep 2025 21:00:22 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: dvjpkvVfhM9hn2e4bwXblY94YEMxt7GGBdcHZFJlRgQ=)
2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6d:f4:03:1a:ad:db:61:3e:3e:23:3a:1b:49:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Sep 10 21:00:22 2025 GMT
Not After : Sep 11 21:00:22 2025 GMT
Subject: CN=56cb1c3d6e796280701bb31e5839c0d85b2316df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:e1:e3:39:85:24:a9:fa:11:5d:6d:ec:20:
f1:ae:3f:16:51:97:46:20:5b:66:7a:cf:e3:15:66:
9d:ac:ff:34:70:2f:47:cc:39:17:f0:36:be:88:6b:
56:97:d5:c7:6a:c0:19:fc:1c:19:0b:ba:40:83:1c:
5e:3a:f4:59:45:ef:02:ec:3a:e8:9e:73:11:17:00:
f4:f5:04:77:59:93:ee:cb:58:b7:8a:a2:0d:9d:cc:
ab:02:e3:8e:ba:34:bc:ce:f4:52:21:05:89:9a:54:
2d:25:56:43:bf:61:41:e8:d9:e2:ae:89:67:9b:78:
31:ae:f1:39:2a:f5:1a:dc:ec:6d:fc:de:be:b3:ee:
6d:4e:3a:38:a6:50:ee:f6:cd:27:e0:b2:ec:60:79:
e1:80:cf:f1:8b:58:9e:18:0b:12:15:ff:30:61:b7:
03:8e:00:b5:d3:e4:f7:36:d4:0d:8a:97:8b:18:f8:
b4:33:d8:bb:28:b2:0a:cb:5f:22:fe:87:4b:73:3e:
eb:ce:d4:d4:9c:45:ae:de:b1:ae:f5:f9:e6:18:95:
4e:cb:13:a1:10:60:3d:3c:86:0e:d3:cc:ed:5b:10:
71:a7:cb:7d:75:b1:be:62:03:c7:96:3f:fe:0b:43:
63:f1:37:98:9e:ee:90:29:25:5c:c6:b5:a7:59:d4:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:1C:3D:6E:79:62:80:70:1B:B3:1E:58:39:C0:D8:5B:23:16:DF
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:ac:2e:05:b1:e5:78:f3:39:0e:30:92:8e:5d:ae:0c:e9:
5d:9e:ea:38:c9:75:60:6d:26:d3:6d:a4:8f:13:d0:1a:07:88:
53:65:0b:da:4d:4b:58:09:1f:81:f8:ba:c4:2b:6a:4b:37:42:
7a:0b:4e:7f:d1:6a:d5:c1:9a:46:21:11:be:c5:03:76:0c:74:
c1:22:2e:75:bc:8d:f5:22:04:26:78:6c:dc:74:8b:91:12:b7:
57:6c:e9:9e:0c:27:85:d2:d9:e4:c1:62:a2:88:54:08:a1:45:
d7:4f:3b:71:4c:4e:12:ba:53:76:7e:25:e8:7f:5f:e3:77:52:
b5:89:21:ad:4c:24:0f:f4:cd:8f:06:0f:8a:4c:e8:66:f9:73:
ec:b3:de:34:1f:80:1e:e3:84:2b:1a:87:06:8e:4c:c4:37:9a:
da:b8:39:97:6c:fa:7d:19:2a:c7:72:d1:96:8c:89:ce:b3:1d:
c1:4a:ac:13:f0:06:61:37:77:53:6b:75:15:8a:f6:aa:68:98:
e6:6d:50:cc:8c:c6:b8:9d:cf:cd:1a:85:74:90:59:ae:97:7d:
6f:11:fa:0b:eb:13:ed:a8:6a:4f:27:82:ec:bf:11:9d:c5:63:
dd:94:ed:80:4a:36:28:38:43:50:72:a2:b2:71:e1:98:8d:b0:
a7:b1:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:06:56 2025 by rpki-client