Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: pnk9kXQqiFZDATjyFo6ya2N8NZ6FcvZi5jFSuKz9LXk=
Subject key identifier: 6E:17:4C:65:01:DD:39:25:30:B0:6E:5D:9F:55:AD:40:A2:7F:01:3D
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019933EE9465A18C433AF788A5D06A7C4D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 14:01:37 +0000
Manifest this update: Wed 10 Sep 2025 14:01:37 +0000
Manifest next update: Thu 11 Sep 2025 14:01:37 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: Lf2VR0EP9OG3yqG+m3NlAEJaky6FKuGYJy67uKMQE3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:94:65:a1:8c:43:3a:f7:88:a5:d0:6a:7c:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Sep 10 14:01:37 2025 GMT
Not After : Sep 11 14:01:37 2025 GMT
Subject: CN=6e174c6501dd392530b06e5d9f55ad40a27f013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:13:dc:78:0b:e4:3d:7f:f3:01:e2:30:54:
10:a3:8d:b0:cb:f4:68:56:a8:81:de:60:18:44:8e:
b2:66:ee:1e:30:98:25:48:aa:42:58:81:3e:a8:a3:
33:fa:9a:27:08:0e:4e:aa:30:2b:de:7f:20:0e:7f:
b1:cd:6b:5e:38:e2:39:84:bc:33:49:c3:3c:35:b7:
c9:93:75:0e:3e:45:4e:25:68:8f:28:60:b2:55:9a:
55:48:f7:85:e4:70:25:4f:dd:f1:b2:93:a0:4c:f7:
23:e0:72:62:4f:4c:3e:5f:33:ed:5c:ce:7c:c6:83:
b7:76:af:4b:a7:de:81:3f:2c:57:f3:6e:1a:ac:0e:
8b:3d:82:60:b1:05:dc:cd:04:97:51:46:64:7b:8d:
3e:cb:da:1a:d5:c5:10:24:6f:be:b8:cd:bb:5a:de:
2a:05:8c:8c:7a:55:a4:c8:62:7f:24:66:d0:6e:da:
78:a0:b8:32:39:ec:44:12:c7:68:47:04:04:35:80:
3e:37:95:ff:f7:6c:b9:4d:a1:33:72:b0:90:52:4d:
97:c6:ac:95:d7:b5:13:4d:ca:3a:7e:a8:11:33:49:
b7:3c:c5:78:06:78:b1:51:e1:7a:d8:66:d7:be:e5:
fb:4a:fd:f2:b6:c5:c0:f6:6f:e8:7d:29:51:fd:dc:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:4C:65:01:DD:39:25:30:B0:6E:5D:9F:55:AD:40:A2:7F:01:3D
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3f:c9:0a:03:21:b5:a8:0a:cc:f8:a5:4f:44:8d:89:6e:18:
96:f6:5a:f2:82:ca:30:db:2e:8a:21:62:1f:02:c8:79:e0:a7:
68:1d:cf:9e:ae:78:73:c4:ab:3c:03:13:99:7d:91:2a:b9:af:
a0:dd:bb:64:2d:57:fc:b9:7a:8f:33:d0:b1:43:42:e7:88:b6:
2e:18:15:3a:22:9f:5e:59:eb:a3:09:3e:13:ec:9b:ea:c0:c9:
93:4c:46:df:ed:e9:d8:2e:46:62:a1:e7:a1:6c:31:27:6d:82:
c7:de:25:0c:49:93:20:8a:e4:a9:f5:b1:ce:19:c0:9b:c0:d3:
2c:fc:1e:af:50:b6:73:d0:f9:c3:a1:be:0c:2c:db:d7:48:ae:
14:b3:76:04:7b:1d:9a:69:d7:85:ba:80:76:71:36:c3:a3:d1:
05:bd:93:6c:72:62:4c:3d:ef:64:68:c8:d0:1d:5e:88:66:01:
c9:09:18:87:c0:c4:ec:a7:24:40:75:1f:8a:33:e0:51:56:89:
20:19:d4:60:83:00:26:48:ed:ab:a3:dd:89:c8:48:80:c3:d7:
36:83:f2:de:d4:ef:7b:9f:34:4d:ae:bf:ec:3f:55:6d:14:af:
75:c2:85:14:a1:85:56:3c:57:fa:a2:08:64:69:08:7c:68:6f:
62:db:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:25:25 2025 by rpki-client