Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: 7x3tCk7F1rruAtYOkAGdMORPW8tuly/nfzRBWgVb6D0=
Subject key identifier: 88:2F:82:73:59:6C:89:E2:24:BD:A9:B0:82:66:EE:9B:30:91:02:AA
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01993680ABCEC289087CA65C8D3E16D15733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 02:00:26 +0000
Manifest this update: Thu 11 Sep 2025 02:00:26 +0000
Manifest next update: Fri 12 Sep 2025 02:00:26 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: KwQeTblZflzah+XbDI48VugZmS5ATzlKL2yWStiKXBQ=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:ab:ce:c2:89:08:7c:a6:5c:8d:3e:16:d1:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Sep 11 02:00:26 2025 GMT
Not After : Sep 12 02:00:26 2025 GMT
Subject: CN=882f8273596c89e224bda9b08266ee9b309102aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:ed:58:ef:c5:7c:5e:30:79:03:62:fa:f0:
c2:70:23:f9:ff:61:fe:4f:ab:e2:76:92:26:87:bc:
b0:3f:74:58:a8:fd:44:f2:ad:54:83:98:86:3e:4e:
4d:85:dd:ba:29:7c:2b:ed:36:4f:cc:7a:cb:f3:64:
d5:61:2b:05:4a:71:d6:40:af:45:4c:52:32:0f:e4:
54:8b:85:37:a2:aa:97:04:82:bc:b7:38:71:fa:9b:
17:41:fe:d9:a1:e6:73:9a:5d:67:a2:a7:c3:e3:a6:
84:4a:e0:84:d1:30:ab:cd:2c:88:e2:4e:03:57:df:
f6:12:3a:c7:c5:1c:4b:9e:cf:d2:3b:f5:0e:13:6d:
bc:a9:ea:1a:86:90:90:de:06:f7:2f:b1:8c:f4:37:
69:d0:a7:2b:7e:8a:cd:b5:d4:41:7a:f7:0d:e6:a4:
64:8e:c5:17:19:51:63:fd:48:49:01:88:82:83:7f:
cb:db:ae:be:54:04:df:33:54:a6:d3:7a:18:39:3a:
33:a6:d2:fd:95:eb:5f:dd:25:ec:47:ad:44:ea:b2:
e3:a0:c3:dd:e5:1b:93:aa:33:59:25:d6:f4:8b:47:
04:32:5a:4d:9f:33:8f:df:01:94:8d:df:51:32:64:
95:6a:8d:7a:d3:18:94:77:5a:47:ab:6d:4a:3e:79:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:82:73:59:6C:89:E2:24:BD:A9:B0:82:66:EE:9B:30:91:02:AA
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d7:21:be:ab:35:ed:57:b2:23:34:00:c6:40:cf:7f:04:f9:
a3:37:9d:b3:08:c3:fc:be:91:bb:01:ab:7d:57:b1:0d:32:74:
bd:30:ba:31:e2:2e:54:a9:ae:88:49:36:57:f4:7b:e7:d1:06:
a3:e5:87:1c:9c:7b:9b:06:3c:ae:2e:e8:51:c8:af:72:cd:f5:
05:b2:8b:62:69:c2:0e:ec:62:93:14:65:be:e7:eb:80:cb:76:
fa:ef:9e:32:33:7f:71:88:d5:70:be:52:12:b2:f4:ec:1a:71:
ae:f0:d7:3f:76:c7:7e:59:b6:69:0d:5e:84:4c:d5:4e:31:ee:
d9:a1:cc:29:2d:af:db:b4:91:cd:fb:e9:ae:b5:a9:c0:57:47:
60:63:ae:f7:ab:45:9a:a1:28:af:9c:f9:9a:33:2d:1d:80:a2:
89:44:08:99:43:16:2b:32:a3:ec:e3:e0:6e:26:60:ac:43:fa:
24:c5:88:8c:9c:0c:b9:b4:fb:aa:6c:1e:a5:35:e6:d3:db:32:
b2:bf:5b:f1:3c:07:ae:9b:21:b8:7f:a2:56:22:f7:50:48:a1:
44:89:c5:c0:72:f2:86:1e:d0:b4:24:e9:0e:8b:8e:2d:1a:41:
f9:2c:5f:b7:af:e0:9e:45:3d:15:ae:6e:c4:ab:ec:c8:6a:28:
73:63:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:40:29 2025 by rpki-client