Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: TyxNOKJwyDyl+9RwWg/sDCnb+91iWyIqwhIYbbnJzk4=
Subject key identifier: 2A:9F:82:A5:31:FB:AC:F3:F9:03:BA:79:05:7A:35:0E:98:58:00:87
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 0199221F49929CCA89358D46EAF88258FBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:01:39 +0000
Manifest this update: Sun 07 Sep 2025 03:01:39 +0000
Manifest next update: Mon 08 Sep 2025 03:01:39 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: tHHMuRo2able25hkKi79sq+2CaXNemQTiZ2w6rz5dKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:49:92:9c:ca:89:35:8d:46:ea:f8:82:58:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Sep 7 03:01:39 2025 GMT
Not After : Sep 8 03:01:39 2025 GMT
Subject: CN=2a9f82a531fbacf3f903ba79057a350e98580087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:6b:c7:b3:4c:5b:b9:98:3b:2f:13:04:26:
a0:9e:07:0b:b9:6c:af:de:dc:ca:71:0f:0f:be:67:
85:53:72:77:30:fa:92:eb:e4:23:c9:81:ab:a8:81:
08:ac:3b:7e:3f:c2:a2:12:25:e4:29:35:59:0a:49:
d4:3d:23:3f:d1:09:35:9a:37:26:ec:75:74:12:fc:
10:f5:30:6b:37:26:05:99:26:c8:3a:79:12:59:b9:
13:95:55:9b:71:2f:18:ba:a0:b1:13:93:20:c6:74:
ca:77:90:58:8b:10:bd:ec:63:23:2c:7e:4f:eb:c0:
06:f7:37:38:4a:98:ee:f1:23:1e:03:9f:1a:77:bf:
22:69:16:f3:e4:c7:dd:ab:86:0d:59:96:a6:b7:4c:
6d:a1:fa:96:a4:ac:0a:35:1c:37:ba:8a:db:86:f4:
e4:84:5c:e0:49:44:08:a3:65:dc:63:17:60:8e:6a:
5d:34:25:4f:d5:7c:c2:38:ee:56:95:3a:0b:15:fc:
83:6a:b2:38:b2:ef:44:98:62:1c:22:0f:57:f2:33:
c3:5a:9a:33:37:7e:c8:1a:a6:3b:a4:26:59:67:1f:
c7:76:00:15:12:cc:96:48:20:f5:f7:63:03:43:6e:
ac:d0:f7:4e:69:02:aa:8c:da:f8:7c:84:63:9f:ef:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:82:A5:31:FB:AC:F3:F9:03:BA:79:05:7A:35:0E:98:58:00:87
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:45:29:7a:64:5b:b9:76:e6:47:6c:c7:5e:9f:9c:41:77:
36:c2:b9:20:d6:48:a6:bd:87:61:0f:bf:1f:df:5b:93:92:aa:
f3:fd:b9:78:9e:2a:c6:34:f6:a7:a6:07:e1:76:fb:28:15:25:
b5:38:fb:74:6d:b3:36:f2:e9:ff:b1:b5:6f:1e:a2:eb:3a:1b:
da:eb:0d:6d:b8:f5:f6:88:9c:69:44:c9:46:a4:15:50:06:93:
f9:1f:19:2c:d6:b3:11:c4:20:a0:ef:8f:8d:68:a4:58:68:07:
d5:f5:8e:f7:58:9b:e5:ba:4c:a6:d7:0b:17:9a:25:77:2f:8a:
74:c3:2d:c2:9c:e5:e1:60:2e:b6:9e:17:fc:a8:c9:f4:e5:e3:
da:f3:a8:ec:3e:4d:80:19:d7:77:d5:80:db:69:5e:00:4f:a3:
3d:58:2d:bd:ee:84:20:0f:a7:09:02:96:de:8f:33:f3:13:41:
66:95:9a:54:41:20:fd:32:d7:0a:ed:02:ff:15:07:f6:f2:db:
23:9d:ae:1e:54:1a:fe:c5:6b:c0:8c:2b:53:77:43:9d:44:f7:
62:8e:e2:61:af:be:e7:03:d0:86:4a:b4:19:b0:f7:a3:a1:f6:
57:87:a8:d8:b0:2d:be:d5:96:6f:89:c2:b6:47:7a:c6:c7:ef:
10:5d:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:05 2025 by rpki-client