Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: w3+6i/RJq18lDAnlkHsbLCAxtsbBhtXfMWuQansZezo=
Subject key identifier: B6:44:F2:40:38:39:22:4E:EC:BE:D0:D3:F6:3D:75:81:26:EA:85:70
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 019932367E7000A32097CC469D5F76AB1D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 06:00:56 +0000
Manifest this update: Wed 10 Sep 2025 06:00:56 +0000
Manifest next update: Thu 11 Sep 2025 06:00:56 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: ucsXiIGaEabOc9gZNh21FkDAaze1o9JmG1xVn64Pfx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:7e:70:00:a3:20:97:cc:46:9d:5f:76:ab:1d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Sep 10 06:00:56 2025 GMT
Not After : Sep 11 06:00:56 2025 GMT
Subject: CN=b644f2403839224eecbed0d3f63d758126ea8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:c7:5d:81:b4:2f:e8:3c:b5:f8:f5:00:b6:
c6:15:8c:a4:aa:3a:3b:69:25:a0:de:24:09:b9:d8:
b5:82:43:43:7d:83:c2:11:59:92:d4:e8:c7:62:a4:
ac:24:ae:12:33:6e:c9:70:ea:df:57:26:fb:46:49:
94:d0:1a:17:c6:20:ef:c9:a6:05:53:d1:b3:9b:71:
33:a6:cf:4b:ae:10:d8:3f:0c:1a:cf:9f:4e:7b:10:
b4:09:01:e2:f3:d7:f8:dd:63:cf:dd:bf:e1:6a:10:
f7:c1:1f:2d:4e:ed:b0:0d:ce:fc:af:ae:2b:b2:f6:
5f:89:4c:83:b1:1f:5d:5b:e4:03:fa:44:38:a1:cf:
d9:c2:04:f6:9f:4f:2f:c8:16:8e:90:be:45:a7:41:
82:63:67:5c:47:b1:02:30:ef:77:5f:13:2c:c3:6f:
9a:a2:d5:84:44:6b:41:40:4d:57:be:2d:b2:e2:01:
9a:e0:25:32:b4:5b:af:5e:5b:78:91:68:34:78:bb:
04:26:2e:bb:eb:79:4e:60:2e:1b:3c:3a:5e:58:72:
8c:f6:80:0f:55:e4:5f:00:5c:80:ac:fb:6f:8f:2e:
3a:67:5b:10:f2:07:7b:6c:0b:26:37:17:21:1c:83:
0e:87:0a:d5:04:95:d6:be:80:5f:3e:3a:3e:d6:b7:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:F2:40:38:39:22:4E:EC:BE:D0:D3:F6:3D:75:81:26:EA:85:70
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:68:f7:d4:80:26:df:ef:d1:25:a7:86:bf:f0:2c:5b:51:
0a:03:89:f5:4a:c8:50:ff:42:fc:fa:87:7f:09:63:3d:c4:1b:
6b:42:e6:40:2a:c8:44:49:8d:7f:bc:35:a8:36:36:ab:37:22:
a5:fc:0d:62:df:15:c1:f4:ae:4c:99:f3:a3:c0:e3:10:ff:22:
80:04:10:83:eb:9b:15:d7:bd:72:22:31:5a:1e:2c:61:b9:af:
14:ce:cc:52:7f:f9:e8:58:33:81:54:75:c5:2f:e7:18:e8:a8:
76:48:2b:cf:cc:fa:6f:97:4f:7d:9a:f6:ab:e1:b0:7e:c9:fb:
57:a5:f8:a1:1e:47:13:18:2c:37:3b:5a:e0:a7:a6:ef:04:ab:
53:6f:9a:ce:69:0e:ed:f3:c5:4d:7c:08:da:ef:5f:ab:8d:3a:
14:3a:a7:cf:d6:79:d2:01:3d:6f:e2:f9:d2:73:d7:54:6c:62:
9a:67:a7:10:1b:e8:31:68:f6:36:8e:58:9d:c6:f1:80:67:f4:
93:b5:19:9f:14:26:ae:81:a9:6d:a1:6e:16:61:69:4b:ac:cf:
77:a5:cc:b3:60:c8:aa:c4:19:89:a5:17:df:fa:eb:74:cf:8c:
67:ee:95:ee:51:04:cc:9b:d6:97:46:a9:05:6c:45:4b:d1:96:
ef:0c:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:22:04 2025 by rpki-client