Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: CJtnVH/gA8hizHZYpXGoq228L/20wqmO60LFux53wvM=
Subject key identifier: CC:F9:E9:C2:4A:40:DF:52:5C:16:3A:9B:EF:03:42:46:D9:0F:95:DF
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019938DE9FFB9700AF5AEC0DFF9817CEF9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 13:02:17 +0000
Manifest this update: Thu 11 Sep 2025 13:02:17 +0000
Manifest next update: Fri 12 Sep 2025 13:02:17 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: LAoysXFJ+IrB0uUEoFUCUYWXHoBPmRv6X/BXI8+CgDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:9f:fb:97:00:af:5a:ec:0d:ff:98:17:ce:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Sep 11 13:02:17 2025 GMT
Not After : Sep 12 13:02:17 2025 GMT
Subject: CN=ccf9e9c24a40df525c163a9bef034246d90f95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:1e:67:19:b9:83:15:8a:6a:09:9b:97:fa:
03:9b:bd:75:bc:69:12:d8:a5:40:ae:c1:bc:82:c9:
ae:d1:16:4a:a8:42:a6:ba:fd:de:23:35:52:f9:eb:
86:25:02:33:be:ed:ea:f4:78:bb:a9:56:e1:db:4b:
74:50:0e:17:60:e3:50:8a:04:f1:89:ee:9a:be:01:
90:ff:b5:8c:b0:c2:c7:e5:ac:45:05:52:4d:ef:85:
23:aa:5a:dd:f8:7d:ff:fc:41:00:72:e1:0e:80:56:
b4:f7:86:26:dc:c3:a4:aa:45:e7:a1:c9:7e:47:50:
44:4a:f2:35:af:90:47:3b:23:77:97:28:7b:72:7d:
74:83:47:6a:70:26:41:bf:21:8c:58:f5:2a:28:bd:
96:e5:14:de:a3:c7:b4:42:e5:39:80:95:49:ee:1e:
fd:0a:8d:4c:fe:f5:2a:59:93:dd:46:6b:67:10:81:
38:6a:3f:6d:40:97:3a:82:a2:10:34:29:39:1b:18:
ca:43:ab:53:1c:c3:dd:0b:e6:ce:17:3f:7b:49:c6:
c3:e8:a9:c4:a7:d5:5f:1e:c7:64:75:2a:03:99:07:
c8:06:33:37:a9:22:08:7f:df:14:be:bf:0c:3f:2c:
48:7c:3b:c5:42:4c:77:52:01:f2:64:87:78:86:b8:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:E9:C2:4A:40:DF:52:5C:16:3A:9B:EF:03:42:46:D9:0F:95:DF
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:7b:3e:99:75:51:4f:f9:c8:2a:63:35:86:b8:24:44:82:
3f:c4:29:4b:30:d5:88:9a:1c:99:2b:e5:d0:b6:16:f4:49:71:
9d:77:04:2b:7c:df:87:f8:2b:78:cd:c7:ac:f3:f4:89:03:1b:
78:1e:03:aa:c9:06:14:1e:57:87:86:c2:86:66:95:76:5a:ea:
32:1d:ee:5b:db:08:6f:c5:b5:1e:0d:a6:0d:a0:a4:90:2c:0d:
9c:a5:b6:4b:54:ae:eb:19:83:e4:38:b4:51:24:42:4c:f3:56:
f7:db:54:b2:a5:52:0e:b0:ec:30:38:a4:20:48:8d:10:22:17:
61:b3:b0:40:57:f4:72:0f:c2:3c:b5:91:1f:f6:82:23:c7:49:
3e:5f:e3:ae:54:f7:5c:94:b5:66:7e:0f:62:f3:94:a2:ec:08:
c1:cb:f0:4e:c4:29:a5:d2:08:ff:14:6d:30:68:e2:63:c9:d0:
0d:3a:b9:ed:b7:7d:54:3b:ca:32:60:67:55:27:78:4e:b7:c3:
b6:8c:66:01:47:59:75:3c:30:f4:39:1a:b7:c8:14:9c:12:86:
e5:4f:19:d1:4f:e9:6b:4b:2f:bc:6f:f8:6e:0e:0a:0e:de:7c:
eb:0c:fc:e2:f1:4d:e1:15:d2:59:bd:99:06:9a:aa:0c:c2:d5:
63:31:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:58:04 2025 by rpki-client