Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: eRLarJ5kcYY1YRDofuNPrXUw8SpfyzLNGpR2tFfPkTw=
Subject key identifier: B2:54:00:B5:FD:31:E0:C5:E0:16:BF:B8:2A:8F:4A:66:D7:44:44:A3
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 0199172CBA4ED91D88690CF0A9554382193B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 00:00:31 +0000
Manifest this update: Fri 05 Sep 2025 00:00:31 +0000
Manifest next update: Sat 06 Sep 2025 00:00:31 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: EUAlf55xTo9h1lBKhZLwVzCVJJUlvOdjy6HGTJzPw30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:ba:4e:d9:1d:88:69:0c:f0:a9:55:43:82:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Sep 5 00:00:31 2025 GMT
Not After : Sep 6 00:00:31 2025 GMT
Subject: CN=b25400b5fd31e0c5e016bfb82a8f4a66d74444a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:36:52:9a:ba:db:1b:18:cd:e3:e5:31:34:
fc:26:74:84:2e:61:b4:d1:78:b4:45:fc:8f:62:db:
b7:e5:8e:23:7e:df:13:46:8a:71:25:2e:bd:42:31:
2f:95:01:fa:aa:ea:87:a8:64:6f:25:52:0d:f7:cb:
57:0d:80:bd:03:e4:8c:f5:9d:1c:83:4a:cc:4f:9e:
ab:e0:c1:ea:28:ca:13:92:3d:79:9e:fa:8d:96:b1:
a1:4c:35:7c:1e:b3:25:21:12:29:1d:f4:14:3f:fb:
90:3d:93:d0:1f:64:77:ca:3b:19:49:3c:8c:16:98:
fd:42:cc:94:ce:e0:b6:fb:ac:ba:03:f4:b9:6c:e9:
2f:e9:fe:a4:77:28:9c:93:f9:98:dc:43:c5:44:50:
97:18:74:e0:5d:71:82:fa:7b:52:6c:97:49:34:76:
01:53:63:12:2b:2e:6d:e3:d9:d7:66:87:e4:9d:b3:
10:47:c4:fc:a8:10:72:84:df:a7:73:68:a7:7d:e6:
ad:26:06:30:66:4b:c8:55:9c:4a:7d:8c:35:9c:54:
b7:bf:f4:ed:88:8c:d4:00:ee:e3:85:48:9e:b4:f8:
29:0d:b0:eb:2e:58:ad:15:71:53:a8:8d:bc:a2:41:
86:1a:a2:23:1e:f0:0a:90:3c:1e:ca:3a:23:05:df:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:00:B5:FD:31:E0:C5:E0:16:BF:B8:2A:8F:4A:66:D7:44:44:A3
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:d0:53:e5:07:59:9e:10:55:5d:17:63:4a:21:92:b2:73:
98:da:19:27:dd:9a:63:e8:70:e1:be:e4:c4:62:cf:b9:1f:39:
0b:38:80:8e:db:5f:30:ee:bc:b1:67:75:8f:1f:e2:79:ea:c3:
d3:5f:cf:a4:26:c9:52:d6:08:9b:03:d2:b9:2b:e7:d8:fc:84:
c2:28:79:7d:74:82:87:23:9d:fe:c8:80:77:ff:8a:d6:07:ca:
5d:9e:21:db:36:97:31:ea:7d:b1:fc:bd:f1:e2:58:26:e9:49:
72:03:65:66:67:3b:f2:eb:0b:2b:73:0f:33:cc:53:a1:04:a4:
44:52:38:0d:91:b1:7a:b6:da:fd:0d:1c:85:05:a4:3e:b6:f4:
9b:1e:4a:17:99:5a:ba:09:73:ea:82:ce:fc:c0:f5:90:3b:19:
1c:52:e3:43:66:dd:bd:e9:a8:16:e6:e3:76:96:7d:5b:b5:82:
ae:58:c4:90:a0:d6:ba:6d:c6:af:7c:dd:d9:f2:be:9f:47:4a:
3b:34:f3:27:c0:3a:a1:b4:41:1f:6c:5e:84:ac:6c:7c:a8:f8:
b3:8c:12:37:e5:a2:ca:4c:d8:68:03:f5:ed:68:ba:94:0c:71:
81:b6:7c:05:a1:2a:0b:03:8d:b9:c4:c3:e8:3e:fc:f1:ca:dd:
fc:b6:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:30 2025 by rpki-client