Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json)
Hash identifier: Fel085u7wk3y1G0VhC00AjKUAno829/dXqmilu9/FtU=
Subject key identifier: 73:73:74:F3:27:48:5A:FD:BF:D2:7B:4A:C8:49:6D:FB:57:48:57:5D
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 0199180A800202235CE62AB44414056D237C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 04:02:45 +0000
Manifest this update: Fri 05 Sep 2025 04:02:45 +0000
Manifest next update: Sat 06 Sep 2025 04:02:45 +0000
Files and hashes: 1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=)
2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: DQubURLqSikVZonU6JcXQeS+zWK26RRNLBoxDS50xbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:80:02:02:23:5c:e6:2a:b4:44:14:05:6d:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Sep 5 04:02:45 2025 GMT
Not After : Sep 6 04:02:45 2025 GMT
Subject: CN=737374f327485afdbfd27b4ac8496dfb5748575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:f5:d7:41:7e:34:d7:3e:b8:4a:f2:f8:a8:
75:5f:7f:e9:ff:79:ca:a8:e8:ff:e0:2e:79:a8:14:
ad:27:4e:fa:b8:df:6f:5e:1d:5a:c8:55:1f:75:8d:
33:10:e3:ac:90:82:93:55:36:be:23:e7:54:3f:c4:
ed:99:ea:f1:0f:4b:90:ba:a5:64:b3:71:d3:d6:6e:
da:db:a1:f3:81:f7:02:34:e0:61:35:4c:7f:3e:72:
53:88:fb:8a:10:f8:ce:b0:01:e7:2b:d4:02:bf:a0:
66:ff:11:6c:2a:27:36:87:a9:ae:be:4e:9e:53:64:
41:88:0f:6b:9d:5b:89:29:c6:82:a6:56:3b:ed:dd:
32:f8:d1:9b:97:b1:dd:3c:29:b8:c0:cc:cb:c9:9c:
02:8f:88:ff:69:25:1c:a0:c7:2c:f5:fb:8c:49:ef:
29:26:1f:4d:3e:d3:a1:c0:df:81:08:66:82:3b:b7:
b1:97:b7:41:a7:b1:0c:d0:9a:13:b6:50:dc:87:53:
a3:d0:68:48:00:5d:f4:e1:a3:b6:68:43:e0:0f:f3:
72:18:ad:5e:78:9c:0c:8e:be:a7:a5:c1:d9:fc:c8:
67:56:c7:b1:09:e9:e9:24:e4:a5:e0:d6:a0:f5:c8:
09:93:3d:ba:cc:46:cf:03:f9:bd:d6:fb:bc:ec:a2:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:74:F3:27:48:5A:FD:BF:D2:7B:4A:C8:49:6D:FB:57:48:57:5D
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:c4:7a:ef:ed:d5:b5:c9:93:7a:74:ad:19:be:9f:86:29:
7e:72:78:93:31:7e:64:98:8e:c6:ce:fa:e1:b1:82:f8:38:cd:
00:69:d8:a8:44:fe:e0:dc:f2:82:5d:9e:ef:8b:9c:80:c4:c4:
f4:da:07:d8:51:26:7b:a0:b3:ce:a1:79:a8:0a:70:fa:ac:43:
9a:9a:4c:02:7c:d2:f7:02:8f:89:9e:5f:68:ff:4d:64:1a:26:
69:7e:6e:3f:6e:70:9c:b4:49:c6:13:f8:dc:ac:57:69:1e:bb:
81:11:74:54:b6:02:ef:e9:c9:1e:8e:ed:58:81:b5:a4:b7:5a:
7d:32:8b:b7:73:97:b1:54:1d:c3:5e:3f:50:1b:46:53:06:b3:
31:4c:19:e3:64:92:1c:4c:21:0f:2e:8b:83:3d:36:cd:77:8e:
08:4b:71:b3:d7:05:6b:e3:e4:fc:6b:f3:23:04:a5:6c:d1:fc:
6e:c9:5e:d5:6d:56:d1:ce:02:90:50:c0:78:1c:5f:a7:ea:99:
67:72:b1:44:ab:fb:5b:7d:e6:6a:a9:df:5e:1a:b3:ed:ea:0b:
be:49:24:6c:00:bd:f7:49:50:43:ff:16:0e:e5:d1:23:d3:b7:
0e:81:eb:f4:4d:19:ae:ac:5a:db:4e:df:28:04:b9:e5:cc:00:
e2:5c:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:42 2025 by rpki-client