Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: slDxV9jfhaNf09T3mfZFfamJdT4N/AgMlpgTWYIyMdI=
Subject key identifier: D5:2E:90:1B:CA:AE:F3:77:33:98:CE:D0:86:68:D4:0E:5B:9C:4C:C2
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0199319212E1FAF010A60A0A86D512FC2106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 03:01:20 +0000
Manifest this update: Wed 10 Sep 2025 03:01:20 +0000
Manifest next update: Thu 11 Sep 2025 03:01:20 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: RzCgYElSYktNlcUUmJboxh8nllPDQ0BiQkUyzBmxQG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:92:12:e1:fa:f0:10:a6:0a:0a:86:d5:12:fc:21:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Sep 10 03:01:20 2025 GMT
Not After : Sep 11 03:01:20 2025 GMT
Subject: CN=d52e901bcaaef3773398ced08668d40e5b9c4cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:9c:94:6a:52:a3:a8:95:34:cb:9f:a8:2e:
dd:b2:53:b6:c4:c8:ba:e1:d0:25:0a:6c:5b:ce:fc:
6a:44:ba:f7:b0:0c:ac:13:3b:8c:6b:13:03:74:db:
e2:c7:84:67:a0:25:a2:d1:97:18:ee:fe:55:62:33:
40:8f:bf:55:8a:2b:e2:cd:fc:ab:25:13:90:82:33:
9c:b4:55:bd:16:df:2f:14:36:09:19:93:fb:d8:b8:
d8:97:2b:f7:34:d9:76:63:55:ff:9a:7b:3c:95:40:
3d:c9:a7:24:d6:f1:27:d5:6d:15:c3:2e:8d:23:cf:
50:d4:f2:00:88:53:0e:c6:8b:07:d1:2d:ac:2f:68:
5b:82:be:a7:1e:bd:57:27:9d:ff:81:a2:24:07:d4:
9a:e2:08:c6:f3:b4:e2:59:2b:1c:d5:5c:24:c6:49:
dd:47:de:c2:59:63:69:16:90:43:04:7b:6b:85:53:
97:5a:ee:21:d4:db:b5:e9:e4:55:8b:45:e8:67:30:
9c:b7:b1:d9:c9:20:35:f4:12:5e:b1:6a:75:cb:85:
20:5a:1e:c6:cc:5f:43:b6:af:a9:e3:12:82:af:98:
df:60:35:58:49:5b:4f:f6:e9:9e:18:d3:82:85:f0:
e6:53:cb:80:6c:57:3b:9b:8b:8c:fb:27:35:97:e5:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:90:1B:CA:AE:F3:77:33:98:CE:D0:86:68:D4:0E:5B:9C:4C:C2
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:11:7e:1a:2f:d6:9c:b2:a5:85:14:bc:25:eb:a6:6a:17:
f6:b0:c7:2f:f7:de:05:d4:c4:ee:4a:f6:1c:57:00:d2:71:ab:
30:e3:21:d5:48:cf:61:a4:73:ca:0a:15:ca:f6:f9:cc:64:ee:
25:46:ed:de:2a:e3:11:ab:af:cb:b9:49:f8:ed:f2:6e:63:31:
72:7c:44:30:fc:5d:c9:26:57:a8:f9:c4:d0:8c:05:56:d7:a0:
86:e1:48:a3:42:95:4e:a0:04:da:86:0e:26:0e:45:3a:fa:7c:
b4:ff:d3:bf:43:b2:af:ef:66:d4:8c:15:b9:29:f5:6a:57:27:
e3:16:8b:08:f3:fe:ad:09:3a:6d:99:0a:51:f4:68:0b:5a:e4:
5d:48:34:76:12:08:c5:fe:a4:d1:42:19:4a:57:89:4f:6d:31:
21:91:fd:82:01:3c:d9:1e:14:1a:20:dd:56:a6:82:c0:c5:05:
85:71:dc:89:86:c8:37:cd:ce:11:15:8b:ae:1b:a1:3c:d3:46:
51:a7:e9:cb:b5:51:7a:cf:65:1f:98:f2:9b:6e:45:a2:75:f5:
42:d7:01:0e:f4:d0:23:13:67:ac:89:61:11:bc:25:ed:ee:d3:
9b:a1:90:00:7f:c0:ac:cb:80:a1:85:e8:1c:fa:4f:51:58:b5:
b5:0e:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:52:21 2025 by rpki-client