Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier: 9sr0SYcmaApdFhGx2tEuDXoiftZ4px+G8ZVp4RcsOgA=
Subject key identifier: A0:D9:57:80:DF:11:67:A4:75:09:89:9D:AA:6B:06:A4:D4:5A:8C:A2
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial: 01993839EDBA431F5670C87334AA36CDB348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 10:02:24 +0000
Manifest this update: Thu 11 Sep 2025 10:02:24 +0000
Manifest next update: Fri 12 Sep 2025 10:02:24 +0000
Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: t9MPLsKPPD4gAokqeQfI1BtAmlIV5fuq6lGEJIs4E0o=)
2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:ed:ba:43:1f:56:70:c8:73:34:aa:36:cd:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Validity
Not Before: Sep 11 10:02:24 2025 GMT
Not After : Sep 12 10:02:24 2025 GMT
Subject: CN=a0d95780df1167a47509899daa6b06a4d45a8ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:fc:ee:56:94:2e:14:af:c7:51:ab:a5:b8:
f9:6b:3d:41:82:ea:2e:58:5c:95:35:fc:5e:51:97:
88:94:68:5d:aa:5e:94:08:fc:9e:a2:77:7d:32:3b:
bf:9a:a0:10:75:90:fd:01:68:6f:0e:c9:80:0d:7d:
dd:1a:1f:8a:da:4e:1d:d7:9f:04:cd:4b:9a:d8:32:
ae:9b:0f:d5:53:95:62:ee:97:51:be:4e:3d:4d:c6:
29:98:17:09:7d:74:64:af:34:74:1e:d8:03:81:9c:
47:bd:57:f6:f4:aa:4e:7c:63:22:74:6c:60:b7:9d:
13:18:96:f6:45:8a:f9:07:f4:38:1f:96:e9:b4:33:
99:00:99:ab:25:fa:8e:a6:df:02:ad:59:d2:91:8a:
61:99:59:9a:1b:8c:c5:9d:c0:32:97:c6:cf:73:03:
53:7e:a3:ba:45:d9:2f:34:5b:47:45:89:e0:31:98:
d3:b8:bb:e4:ae:7f:52:b1:b3:2b:02:00:52:09:80:
28:1b:b4:53:41:4f:e2:3e:ee:74:ae:cb:73:a4:a0:
18:cb:c1:72:10:20:5d:e5:d3:f3:2c:f4:07:61:36:
ea:cb:35:b4:93:53:da:45:28:68:be:4a:a9:28:87:
db:b9:b9:dd:9f:ba:37:a1:18:65:30:09:a2:ae:53:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D9:57:80:DF:11:67:A4:75:09:89:9D:AA:6B:06:A4:D4:5A:8C:A2
X509v3 Authority Key Identifier:
keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c0:06:35:e4:5d:88:c3:65:f0:1a:c8:7f:96:5d:3d:c3:f4:
c5:91:af:56:7f:d7:c1:65:8a:6f:be:43:aa:89:c6:58:c5:e6:
e7:64:35:51:9d:86:1c:4a:f1:f6:1c:7a:1d:0b:1f:ed:e6:0a:
8b:4c:10:54:3f:fb:85:7f:8f:74:e0:b6:99:d9:c1:5d:e7:2c:
27:07:dd:8d:4b:ae:32:6f:89:f0:ec:06:cc:56:65:fd:8f:21:
c8:8e:d1:ff:cb:3a:2b:0c:3b:66:70:a2:a4:bb:b9:b1:de:59:
24:33:61:5b:3d:f3:4e:1e:2d:64:17:de:03:68:08:f9:2e:72:
33:ee:44:28:62:11:00:4a:1d:cb:31:ce:fb:c5:a6:5c:bf:ac:
34:ea:23:23:69:71:cf:28:d3:06:03:c2:d0:93:17:a4:29:94:
dc:d3:2e:c0:83:36:69:76:4e:92:81:49:82:2d:cf:36:ce:0b:
68:57:c7:07:6f:52:ca:13:ff:1e:ec:67:87:c7:ad:d7:5e:f7:
9b:d5:a7:c5:ad:66:ec:0f:c7:e1:f2:5f:b9:ff:39:1c:4c:89:
85:21:b0:40:bc:cd:26:fc:3e:e0:4d:18:dd:64:5e:18:73:77:
94:88:1f:c9:96:fe:55:76:43:4a:3f:6f:a1:b4:d5:af:95:1c:
e1:3f:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:00:10 2025 by rpki-client