Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: Y2d6Sw5kwGC7a3nj4XPqEkV3qJcr5Nl0fzaigper/sI=
Subject key identifier: EE:8D:87:31:F0:21:23:79:9A:68:45:67:62:E6:A5:E4:DD:0E:8B:89
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 019923A00F6CB3E9FA35B4B30C65024010C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 167C
Signing time: Sun 07 Sep 2025 10:01:56 +0000
Manifest this update: Sun 07 Sep 2025 10:01:56 +0000
Manifest next update: Mon 08 Sep 2025 10:01:56 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: t5OlNYbpmhqNYhy2fTsnl6bVZVpBUxHx1rT98w7NvAU=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0f:6c:b3:e9:fa:35:b4:b3:0c:65:02:40:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Sep 7 10:01:56 2025 GMT
Not After : Sep 8 10:01:56 2025 GMT
Subject: CN=ee8d8731f02123799a68456762e6a5e4dd0e8b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:b9:68:bf:38:7b:74:89:03:52:95:6c:61:
42:9e:e4:fa:d7:5d:0b:d9:4e:7e:4d:58:c2:5e:e9:
f1:ca:be:14:84:fe:e0:e4:b4:86:35:6e:45:1c:50:
b1:58:9b:36:70:67:1c:1a:f1:5e:1e:ae:f7:ab:b0:
99:5c:c5:1d:26:fc:1e:3a:a7:4b:09:93:fc:d4:9e:
eb:48:29:6d:b3:51:e5:b8:a0:07:68:1a:a4:60:04:
b7:52:e7:8f:fa:63:e1:10:99:10:10:b6:10:1f:e4:
5a:66:28:eb:3e:10:5e:e2:ef:c9:f3:00:fd:dc:d9:
55:15:e6:b3:c2:b6:f2:c8:83:dd:1d:ed:7c:1c:fc:
11:cd:bd:e4:d7:48:d8:81:b1:6c:ce:93:85:02:c3:
b1:1f:06:ed:2c:16:3a:28:aa:4a:a9:31:df:64:02:
58:e3:85:9f:b9:08:6d:63:4b:c1:14:6f:1a:cb:b6:
4e:6b:fa:ed:72:61:0c:93:7c:c8:d4:30:f4:f0:5d:
e1:20:33:3d:18:dd:18:5a:9b:15:be:9b:b4:bd:dd:
66:bc:1a:54:b9:76:7d:16:b7:74:fe:52:6a:20:90:
9f:30:17:ed:eb:5a:73:b7:51:d5:a6:4b:35:91:2d:
64:ed:e1:ca:bb:b9:c7:c5:20:cc:51:d0:ae:a8:4c:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:87:31:F0:21:23:79:9A:68:45:67:62:E6:A5:E4:DD:0E:8B:89
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:9a:86:47:db:e9:c3:bb:a6:88:5d:f4:51:ab:a1:e9:b3:
4a:44:77:e4:9f:3b:99:f8:bc:2d:32:c3:ce:79:92:e6:b6:28:
2a:d4:72:5d:98:41:57:8f:50:eb:90:0c:f6:5c:7f:a8:bc:35:
09:e6:69:da:a8:b8:9f:f1:ee:62:47:74:61:1a:85:f9:c5:53:
16:b6:7b:39:37:6b:18:2b:34:01:f1:4d:df:dd:19:e2:d0:36:
c1:29:6c:90:06:ed:12:91:40:67:ab:8b:d2:96:3b:a5:eb:e6:
75:d9:19:65:1f:65:bd:14:e5:7b:30:21:af:1d:e0:88:69:78:
87:5d:c1:e9:7b:2e:ab:6b:dc:75:02:d5:7e:1f:5e:f9:aa:05:
8f:f2:87:77:f8:5e:fd:42:22:0a:52:2e:17:89:28:d1:80:24:
10:ca:bd:2a:a4:43:38:ee:86:15:28:7c:bd:aa:ca:ca:48:1b:
cb:a7:e6:40:f2:83:25:2b:a4:9a:a2:83:32:80:10:cb:14:ac:
f3:f5:30:10:85:1b:cd:6e:3e:0b:36:0c:9c:e2:83:41:bf:4e:
b5:46:e7:b9:1d:03:7a:c3:d1:89:50:8f:13:2a:2a:28:d8:2c:
de:fb:c9:c9:11:d3:71:b5:3a:06:ee:7f:04:9a:00:2b:3c:48:
02:28:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:14 2025 by rpki-client