Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: tJBt0VY3TSFdxngB3jYaVaIWoUwCBCm6SygpWvS1ngc=
Subject key identifier: 2C:A9:AB:51:5C:F4:66:B8:D5:83:7A:E3:4A:8E:F3:B8:50:70:6D:46
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0199616B380E78EEDB4021687A52B5AF4710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 169C
Signing time: Fri 19 Sep 2025 10:00:40 +0000
Manifest this update: Fri 19 Sep 2025 10:00:40 +0000
Manifest next update: Sat 20 Sep 2025 10:00:40 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: Rv55sxsXUCd2Z8WAkpCmtrIfb6hmAQSXO27/16JhEHI=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:38:0e:78:ee:db:40:21:68:7a:52:b5:af:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Sep 19 10:00:40 2025 GMT
Not After : Sep 20 10:00:40 2025 GMT
Subject: CN=2ca9ab515cf466b8d5837ae34a8ef3b850706d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:4b:b0:07:aa:5c:e7:8f:6f:d2:fe:0d:a3:
99:e9:0c:e0:3b:b3:32:32:d1:91:ed:64:0f:51:b8:
d4:e1:77:8d:77:09:10:87:bd:80:4d:ae:d1:e8:10:
b7:6f:1e:2d:86:9e:d2:26:f6:96:eb:f9:32:ba:fa:
c1:17:00:6c:ed:15:85:63:bb:d6:38:b7:e9:54:10:
12:26:97:4b:3e:37:5b:c7:39:bc:ff:ef:00:6e:49:
5b:35:08:8a:98:5e:63:c3:6d:ba:0b:ca:99:31:10:
ac:fd:c6:da:40:c2:2b:4f:9a:bf:f5:1a:21:17:95:
5e:60:3f:e1:ed:95:a1:d8:bf:31:39:72:13:2d:04:
3d:44:fa:6a:c0:48:ee:91:aa:ab:af:89:39:38:a3:
35:c3:dc:27:73:d2:ca:65:6f:a5:f2:b0:21:ec:97:
b8:01:fc:02:d7:c5:e9:98:7f:e7:d2:e6:d0:34:af:
0f:eb:da:aa:33:aa:da:88:a0:8a:41:3f:6a:09:2c:
9e:a5:3e:3f:c3:ab:b8:09:99:39:57:14:3a:5d:ae:
2a:0f:da:22:e5:8a:6e:74:c3:42:c1:87:e8:50:be:
f0:79:2b:b9:80:40:05:7c:23:41:63:7d:59:57:9a:
ac:04:0a:a4:5a:9c:50:f9:ba:72:28:6c:51:f0:eb:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:AB:51:5C:F4:66:B8:D5:83:7A:E3:4A:8E:F3:B8:50:70:6D:46
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:88:5f:64:56:b6:ee:19:64:a4:66:a9:3c:41:31:6b:b0:25:
2c:f7:de:de:5d:9e:ba:34:85:9c:4d:39:4e:ea:d3:6e:93:1c:
63:0c:52:36:97:96:b3:33:49:51:e2:a5:c3:ce:b0:48:8e:a8:
2a:02:a8:f8:74:f1:ee:04:07:1c:8a:be:76:5c:68:d3:f1:08:
41:42:ab:77:69:8e:ec:46:99:df:0e:8a:b8:b1:c7:d2:11:76:
c6:eb:c5:ca:df:5c:ab:34:be:c2:48:d4:31:e0:00:78:20:87:
4e:bd:17:bb:cd:fb:05:77:63:36:29:b0:4a:3c:cc:fd:c5:88:
28:3b:26:6a:88:77:01:a6:cf:e1:78:f7:7a:55:6c:2f:d7:60:
51:c0:9e:38:19:55:92:89:17:c9:b7:02:06:41:2f:91:ea:b6:
8c:9c:1a:11:c7:00:3f:dd:a4:2d:8d:13:c4:d9:7a:de:d6:88:
a2:9a:9a:f0:9f:df:20:73:cd:ce:98:fe:9d:56:4d:59:18:9d:
65:53:0a:08:ee:07:3b:57:02:2d:fc:f3:c9:9d:6a:9b:72:3f:
31:c3:41:58:ba:64:be:f1:6b:dd:b7:16:18:0f:a9:da:36:f3:
f0:e5:93:75:2b:a4:68:53:6d:f2:0b:59:53:6f:62:fb:c4:53:
bb:bd:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:02:52 2025 by rpki-client