Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: KJFw9TyBtCBRqk/6PqZ5TSQEn0kMs7iRZCryuJTkWeM=
Subject key identifier: 55:16:1A:4F:23:3D:D7:B7:C6:68:F4:88:7C:13:47:2F:6F:D5:43:B6
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019953E707A084B13E4DA75D82E73162A9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 19:01:13 +0000
Manifest this update: Tue 16 Sep 2025 19:01:13 +0000
Manifest next update: Wed 17 Sep 2025 19:01:13 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: +h/E27IvtLHmTZfJdXB4NvEsdwJ5/Pt5tPSO/ltNP/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:e7:07:a0:84:b1:3e:4d:a7:5d:82:e7:31:62:a9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Sep 16 19:01:13 2025 GMT
Not After : Sep 17 19:01:13 2025 GMT
Subject: CN=55161a4f233dd7b7c668f4887c13472f6fd543b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:e0:f0:bf:99:97:17:de:92:45:9c:e8:7a:
95:bc:88:b0:38:5a:a0:05:c7:48:d7:8c:21:50:15:
a0:99:ea:99:81:8b:b2:07:25:d2:42:71:7d:f2:c8:
80:84:f8:71:99:f6:2b:81:c2:b4:27:79:cc:a0:4f:
b8:d8:58:1c:31:77:5a:bf:cb:43:9d:5b:d3:5a:93:
80:a3:0b:cb:c5:84:a8:d5:77:10:cc:a2:5b:3b:7b:
2a:d8:ba:cd:f3:6b:99:62:69:41:d9:46:3f:d1:52:
be:52:b8:f4:63:7a:80:57:a0:61:20:fd:c3:eb:67:
74:cc:c7:3e:33:2f:fe:91:f3:1f:aa:42:2a:57:6c:
3d:f2:23:40:1c:4a:4a:ae:9e:9c:3f:aa:62:59:b8:
08:b9:08:7b:6f:a0:af:d9:c3:cb:79:1e:f5:f6:03:
7c:3c:9a:82:d8:75:64:89:3a:b1:f7:b2:72:e5:d3:
11:d5:1a:8a:ef:58:78:a0:6e:c1:41:9f:67:ef:55:
c9:15:f4:bf:f0:5f:47:cd:a6:b7:8c:3c:7e:90:2a:
52:04:75:94:eb:57:fb:59:38:30:18:97:53:91:cf:
65:c8:4c:92:06:fa:8a:d5:82:03:26:d8:05:e9:93:
0b:ab:15:9f:4c:9c:20:7f:3a:fc:6d:94:29:d4:b8:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:1A:4F:23:3D:D7:B7:C6:68:F4:88:7C:13:47:2F:6F:D5:43:B6
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e3:da:f4:93:91:24:1b:db:8b:08:f8:a5:22:df:8b:25:89:
5a:0c:8d:78:75:87:1c:ea:cd:d8:f5:49:06:6b:72:27:2c:49:
7f:fd:95:be:3d:78:63:d7:0a:d2:b5:0b:91:23:6a:70:fc:f5:
85:fc:ff:a4:ac:92:22:41:f5:4e:01:4a:9b:8f:b1:b0:73:0a:
b4:06:e1:37:db:c2:dc:76:8a:aa:ea:1d:c4:2b:3d:8f:89:56:
be:42:44:90:1b:ee:6e:2e:2d:f0:33:92:f5:71:e2:7c:5a:2a:
07:da:f0:aa:09:fe:4c:3b:43:33:1a:99:b7:aa:2c:3e:d9:a9:
b5:f7:9d:8e:b6:94:2a:8b:cd:fe:f1:5c:18:98:c5:19:9d:19:
19:09:b7:85:e5:e4:f8:41:34:43:24:05:de:c4:0c:26:94:f5:
d1:51:33:eb:fe:67:de:94:1f:a2:41:f1:33:dd:0c:71:a4:b3:
63:e5:23:f6:89:3a:0d:72:83:6d:40:c5:8c:bf:a9:17:aa:eb:
27:e0:e7:70:87:a9:6c:05:b9:5f:88:3f:c4:4a:f8:bb:99:84:
49:cb:f4:ad:3c:bc:18:db:41:82:87:be:78:49:11:ed:c8:ae:
3a:c8:95:50:c1:30:c3:2d:48:b6:9b:e3:68:b5:c9:4b:99:75:
ae:8c:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:21:40 2025 by rpki-client