Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: E8lIDKkIqhKuZTwrIynSLCeXCtUXULjBx8SYN3311Yk=
Subject key identifier: 23:A8:95:DF:FF:38:DA:ED:49:E3:20:11:E2:7D:6E:61:63:75:88:C0
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0199375D09BEEC5923D5449F523D277E0EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 06:01:08 +0000
Manifest this update: Thu 11 Sep 2025 06:01:08 +0000
Manifest next update: Fri 12 Sep 2025 06:01:08 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: uqD7F3zMT9Lo9t/97ecE+GYXJYgzYFfq4bMIT+vT938=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:09:be:ec:59:23:d5:44:9f:52:3d:27:7e:0e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Sep 11 06:01:08 2025 GMT
Not After : Sep 12 06:01:08 2025 GMT
Subject: CN=23a895dfff38daed49e32011e27d6e61637588c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:0d:95:81:05:79:64:57:bb:d2:5a:e2:22:
d7:73:c4:d0:41:83:a5:c9:2e:a6:3f:42:d2:6d:2a:
78:95:06:f4:63:18:91:0f:be:80:a0:bc:6c:8d:43:
3f:d3:23:fb:de:16:2f:50:35:40:e9:f3:a7:50:79:
a7:01:d4:73:56:a2:46:ec:5c:b6:2b:03:4e:d7:14:
b0:bc:50:b8:3d:99:b2:aa:54:ff:76:ad:66:90:54:
6b:7f:d7:3a:d5:58:96:69:54:06:90:1a:54:14:81:
dc:e0:59:38:37:34:9c:58:7e:8b:be:9a:5d:e5:b8:
90:98:cb:92:5a:85:0a:65:ba:86:94:7e:3d:7f:71:
aa:b9:5c:8c:ab:24:00:f0:a5:e3:b3:50:3f:bb:25:
29:90:e8:ac:d8:4f:95:4a:bc:46:dc:c8:cd:28:82:
0a:91:f1:5e:12:3c:5d:3b:04:99:f3:5e:ce:44:81:
d5:01:21:cf:b7:25:c4:be:b0:43:20:f8:7e:5f:80:
ae:13:dd:55:83:d2:09:36:6e:3d:9f:e3:35:41:59:
fe:a5:d9:c9:1f:1d:f5:8c:8e:6a:2f:fa:a5:61:f0:
63:1c:30:28:d0:17:62:37:cb:d3:95:91:7e:e5:e0:
e0:02:fb:9b:c1:77:53:d5:91:c6:69:db:45:b9:09:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:95:DF:FF:38:DA:ED:49:E3:20:11:E2:7D:6E:61:63:75:88:C0
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:27:d4:3a:3f:43:a1:bf:f1:5a:ed:a4:b8:c0:11:e9:94:
5f:cb:d3:3e:ad:40:80:bb:67:86:05:7d:4f:65:38:71:d4:56:
cc:ae:3a:92:3e:7e:96:f5:4f:71:2d:87:f3:98:36:57:b7:a2:
45:28:cc:55:74:c1:c6:23:00:1c:92:62:ec:d9:8a:55:5b:ca:
41:b9:9a:1f:c3:ab:2d:36:87:1d:68:09:26:fe:39:14:58:48:
38:0e:2b:c4:35:d8:db:77:d5:4e:ee:b4:04:15:b3:72:59:72:
e6:74:2a:a8:33:b6:da:44:20:b8:4e:25:d9:8f:2f:45:0b:d6:
93:4f:bd:2d:f5:ac:51:4f:99:77:a5:73:f8:8d:0d:a4:8a:1c:
ab:4a:47:32:66:fe:35:88:94:f8:4f:3e:ba:47:c9:35:f5:ff:
aa:0a:38:d2:10:80:dc:c8:02:30:dc:d5:02:bb:74:d6:44:14:
0d:78:c5:94:cc:8d:da:57:d8:dd:9d:26:fd:fb:fe:1c:7e:3c:
7d:37:bf:72:16:47:3c:4c:54:d5:0c:e2:44:b6:f7:fe:1e:bd:
30:7a:31:37:e4:93:94:de:25:52:e5:bd:4a:9f:b9:db:a4:92:
01:e1:3b:57:0e:12:fc:b7:0b:5a:16:3c:60:2f:6d:11:66:61:
80:b2:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:07:49 2025 by rpki-client