Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: 2EY/s8lExgPyNSwbq9TxfKD0P3zGmKhf2G+kHgmqSNU=
Subject key identifier: EC:79:B3:3C:C7:E0:36:BB:A0:66:19:22:EF:46:55:F5:1F:4A:25:F6
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 0199312490163ACCC58617E73DECE7A86ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 01:01:43 +0000
Manifest this update: Wed 10 Sep 2025 01:01:43 +0000
Manifest next update: Thu 11 Sep 2025 01:01:43 +0000
Files and hashes: 1: 1F7uxkd5CHW5Nl3RYcymdv41PuQ.roa (hash: CcbwxJuJRF3/aA4m69pX7txPfcLVx2hNzHSkmTtnNVg=)
2: 6OJY_cLGBp28NDNyp5KhfLaq0T4.roa (hash: Q7dSDBkkqsY0c5wjzpyUd8BOdypnvTRmRZWsgkhxLKs=)
3: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
4: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
5: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
6: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: AbV5b7dIFP0ivV0GQ74h6e+v1UZKwaOGrIEv8QltSuo=)
7: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:90:16:3a:cc:c5:86:17:e7:3d:ec:e7:a8:6e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Sep 10 01:01:43 2025 GMT
Not After : Sep 11 01:01:43 2025 GMT
Subject: CN=ec79b33cc7e036bba0661922ef4655f51f4a25f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:38:35:fc:61:38:da:3b:5d:dd:15:21:f4:
61:07:f2:57:4b:77:74:cb:04:02:ee:a4:b0:03:d9:
3d:8f:c4:c0:c9:3a:0d:ae:31:95:c5:11:07:e7:eb:
be:8f:ba:64:f6:2b:34:f7:bd:4f:45:55:5c:64:06:
99:cb:fc:87:6e:e5:ae:ed:59:b0:44:5a:f6:70:b1:
06:eb:c9:ac:fb:e9:5e:10:b3:b5:80:16:6a:9a:3d:
48:a3:57:cc:80:76:9d:60:c6:3a:ee:bb:77:52:cd:
bf:28:a8:56:52:e3:19:61:ee:5e:c5:8a:65:33:4a:
5b:b7:00:4b:1b:6f:ee:f4:3a:45:d2:83:6d:ce:2a:
42:d3:a1:69:c5:c7:3f:48:19:7f:6b:c0:c1:44:b9:
00:10:c4:bb:d9:1a:79:c3:90:be:17:80:f9:52:3b:
80:1e:52:1d:4e:ee:41:7d:3b:4c:e3:08:0a:f9:94:
38:d0:44:32:4c:43:2e:44:ef:db:49:2b:b3:70:30:
4f:48:86:08:b7:d7:2b:19:3b:29:7d:28:bd:83:23:
12:f3:77:94:f6:cf:ea:af:b5:bb:0d:3a:fa:62:61:
d8:cb:89:36:c4:0d:34:78:4b:8f:d5:ee:44:75:ef:
9d:bc:e9:fc:65:06:8a:1d:17:b4:f6:5e:a7:6d:f4:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:B3:3C:C7:E0:36:BB:A0:66:19:22:EF:46:55:F5:1F:4A:25:F6
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:e7:17:de:ed:d5:ac:37:49:6a:be:9b:25:b2:14:75:81:
1e:6a:26:01:22:d2:90:e2:43:27:a2:2a:8c:fb:ca:57:7a:70:
ff:31:bd:9a:a8:03:62:0d:55:96:e9:58:aa:a1:5a:69:09:20:
e1:dc:7a:45:10:e0:60:d6:63:b3:d1:36:c3:d7:21:bc:d4:81:
bb:08:ed:5d:7a:88:fc:38:d1:5b:ab:6b:b3:7e:84:70:d2:7f:
ec:50:b1:64:6b:06:39:34:4a:7d:6f:96:a2:d0:6f:ce:88:f9:
e1:d0:55:58:9f:c8:d6:f9:5a:89:12:ac:79:c6:a1:c8:f7:43:
0f:91:61:bc:d6:8f:db:91:cb:03:89:61:50:16:ee:1a:0f:17:
ef:dd:58:29:fe:70:5d:64:1c:13:30:13:aa:c2:25:6c:b1:af:
c9:d4:0b:f1:12:7f:0e:a7:8f:8b:c8:a0:71:ee:b4:e4:ca:7f:
4f:cd:83:05:ff:06:b1:68:74:12:78:46:e4:2f:ca:b4:d2:b6:
9e:c9:50:d3:45:0b:1f:bd:2f:a0:3f:26:12:1c:b3:d1:fb:40:
b9:b7:ff:e4:b1:65:47:fc:3c:73:62:7b:3b:81:19:13:16:c3:
76:78:81:de:54:e2:51:21:92:c8:53:e4:77:80:c0:07:43:12:
8b:7a:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:14:08 2025 by rpki-client