Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: 7I270rNPFH3TtJFhLTpD141BtdT/5dfvTjEhGRFKleQ=
Subject key identifier: 8C:37:CA:17:F9:61:D2:16:2E:B1:E8:3D:EE:EE:FE:62:75:CB:CB:FD
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 019916BF8373A5E7626C769880F272E9B312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 166B
Signing time: Thu 04 Sep 2025 22:01:13 +0000
Manifest this update: Thu 04 Sep 2025 22:01:13 +0000
Manifest next update: Fri 05 Sep 2025 22:01:13 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: GA8ERJWA4h8yvOe54rGyK2hwMCQ56OrRkC1mKlL/FME=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:83:73:a5:e7:62:6c:76:98:80:f2:72:e9:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Sep 4 22:01:13 2025 GMT
Not After : Sep 5 22:01:13 2025 GMT
Subject: CN=8c37ca17f961d2162eb1e83deeeefe6275cbcbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:4b:34:51:bf:93:68:aa:1e:3a:2d:11:5b:
e5:5e:3b:ba:cd:a3:16:2c:44:7a:93:9a:11:2d:b4:
7e:ec:51:d1:6e:2d:d9:ce:48:51:22:7e:a3:f0:65:
99:71:a4:6a:a9:f9:e0:48:66:28:fc:31:42:e1:c2:
57:34:98:c2:02:75:04:89:3a:a3:2f:99:a5:19:21:
3e:f4:28:68:db:e8:f0:33:56:44:27:a7:85:10:e3:
e2:de:c5:70:08:b5:00:43:79:ca:7b:f6:be:99:13:
1b:38:84:02:8d:3f:12:cc:bf:14:2d:d6:ac:93:7c:
00:3f:e4:48:cb:da:04:66:4f:bc:d6:c2:36:c6:5d:
c9:ce:9c:54:e1:d9:2a:d9:2b:29:79:36:b0:dc:d5:
a8:82:39:f5:d8:d7:25:9b:c1:ca:c9:e2:95:86:c3:
cd:b7:a1:ad:e8:be:45:77:ed:40:54:dd:a4:c3:bb:
27:57:a6:19:72:5b:f9:53:02:08:64:01:83:6b:e8:
d1:b8:9c:08:58:b6:ff:d2:25:7c:b7:40:c4:cc:c0:
82:c7:93:f2:d1:8a:db:ab:7e:38:9a:ce:80:c6:da:
b8:c1:bb:e8:56:40:5a:2f:91:10:4f:da:3b:0e:69:
38:ac:21:a7:59:52:9d:89:d6:80:81:ef:a1:42:2a:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:CA:17:F9:61:D2:16:2E:B1:E8:3D:EE:EE:FE:62:75:CB:CB:FD
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:22:e5:1f:83:e2:87:d7:3a:8f:a1:f3:bf:7f:b5:40:4e:47:
e7:a7:cd:a3:c4:55:e7:1a:47:eb:53:a0:66:0a:5f:3b:d5:65:
d7:f0:dd:80:fa:16:28:18:2d:79:4a:7c:6a:7b:63:63:64:44:
5c:8f:c3:20:8d:23:7a:7f:d1:33:70:b5:a5:57:2c:3e:41:ad:
83:82:a1:79:09:81:d4:6b:90:9c:84:43:2d:47:4d:83:51:77:
87:3f:a7:4c:bd:8f:df:54:fc:e0:96:1b:5c:94:b6:fc:d7:87:
56:49:1d:a4:cb:78:ce:93:11:b6:5f:e9:a4:93:98:41:42:50:
e1:13:98:7f:6b:75:9f:a3:2e:c4:9f:2f:ae:83:7b:9a:b6:13:
c1:51:8f:7c:43:e4:8a:df:ec:ba:c8:f0:b7:d2:00:4a:eb:b6:
41:39:7b:55:7f:d1:3a:62:e7:12:de:bc:42:41:11:33:5e:c5:
48:34:12:d5:31:19:10:d1:dc:9f:09:00:e6:7f:24:3e:15:7b:
48:32:31:42:9b:91:50:07:17:4c:cc:11:37:31:84:17:ce:2e:
0b:c3:ad:96:07:45:42:af:05:0a:fe:03:7b:47:9f:63:db:a7:
93:86:9e:2d:6d:b2:a9:ec:c1:e2:28:4f:4f:54:bf:25:e4:04:
af:e6:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:24:42 2025 by rpki-client