Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: gboktavA2dp9vrF2Mn/f4CN5LOJVHarEQNQfD++W/OE=
Subject key identifier: 44:91:5E:5B:84:48:FC:67:01:E1:05:F8:86:BE:F6:FA:97:24:54:57
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0199350079F80EFE6C75599B21F1CDCE4D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 19:00:47 +0000
Manifest this update: Wed 10 Sep 2025 19:00:47 +0000
Manifest next update: Thu 11 Sep 2025 19:00:47 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: S9bIA8RAIvGHjrTDrgIv1MimYDPzn3I84Qna1tILeuc=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:79:f8:0e:fe:6c:75:59:9b:21:f1:cd:ce:4d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Sep 10 19:00:47 2025 GMT
Not After : Sep 11 19:00:47 2025 GMT
Subject: CN=44915e5b8448fc6701e105f886bef6fa97245457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:58:c9:86:a2:aa:ae:3d:1e:67:41:36:d9:
cf:66:14:ba:0f:60:5f:c4:1f:17:16:16:27:40:20:
23:97:fa:dc:1c:1a:95:b0:55:18:e3:47:61:a0:74:
63:87:a2:42:61:49:a6:8f:2a:3f:76:b6:b1:c5:8b:
52:ff:9e:c5:af:1b:1f:dc:74:b3:08:04:58:c5:5a:
09:9d:d3:4a:49:a4:c9:cb:38:2d:e3:4b:cd:fb:5c:
4f:f7:05:e8:94:b4:c8:85:cb:1e:1d:51:40:c2:bf:
33:e3:8a:50:52:8c:44:95:da:f8:aa:c5:7a:26:ca:
d6:5a:6d:58:33:77:12:06:88:ec:42:77:1d:c2:a5:
9c:70:d7:85:54:a3:ff:ea:8a:b3:8e:0c:70:14:d6:
af:14:7b:f6:b5:2a:02:9a:9a:96:c0:3d:14:ed:a9:
a9:62:d7:5c:c8:74:e5:95:37:76:d1:df:d3:49:4c:
10:82:98:a6:cc:f5:e2:98:a9:59:7d:8e:ac:b4:9d:
79:95:80:3d:01:5e:f3:4c:f7:30:0c:4c:cc:a7:09:
7f:f8:e4:24:9f:83:1f:d8:70:80:35:3b:9d:76:79:
00:d8:b9:30:dc:39:ba:01:19:a8:e6:c0:03:a4:9c:
4d:c3:9a:03:5d:c1:f6:46:90:f9:db:6b:65:f8:24:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:91:5E:5B:84:48:FC:67:01:E1:05:F8:86:BE:F6:FA:97:24:54:57
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2f:f9:90:a6:61:7f:85:f0:2f:c5:15:11:fc:dc:ee:d2:06:
78:1c:e6:51:9c:13:65:7b:bb:b2:b2:f6:91:2d:01:13:c8:5d:
5f:26:cb:57:96:c0:bc:66:4a:c0:b3:31:8e:5e:96:96:37:6a:
66:ad:30:2b:4e:d8:f7:65:46:70:db:0d:5d:40:80:36:6d:df:
cc:8f:eb:2a:fb:4e:3c:25:00:37:eb:06:0b:db:f8:b2:50:09:
92:ac:1c:8c:c4:fd:68:ab:f8:e6:3d:32:27:a2:7f:91:44:4c:
c8:63:0b:9f:ed:eb:f6:51:dd:f7:bc:5a:07:b7:ac:40:1e:2f:
b5:c7:17:77:a2:49:2b:e9:cc:a1:ab:cf:3e:81:c6:e5:1a:d5:
dd:d4:35:45:bc:70:e6:53:65:15:07:dc:b5:f5:88:9d:17:0e:
9c:67:1b:09:c4:4d:2b:0e:9d:94:b0:2d:7f:8e:38:51:8e:31:
73:7f:22:b1:da:91:44:de:d6:ed:75:a8:df:61:37:b1:0d:f4:
63:7a:c6:2f:6a:13:b5:66:f9:7e:78:46:9e:49:ff:73:ec:71:
9a:4d:83:ac:ea:26:5f:a3:ff:fd:51:53:13:f7:b5:f4:b3:04:
29:3b:8f:e6:d2:0e:b4:33:e9:51:59:f2:e2:9b:e4:81:35:de:
99:1b:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:09:04 2025 by rpki-client