Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: gNImSxgmFEfTFfhq0e+7WgfhzgGc22xuPi6ka2WjCVY=
Subject key identifier: BC:E5:6C:F4:EA:0C:ED:A5:CF:44:36:41:A8:A0:EC:76:6D:26:DE:FB
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 01993612C23C24E16EC3417A9F7F83234002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 00:00:23 +0000
Manifest this update: Thu 11 Sep 2025 00:00:23 +0000
Manifest next update: Fri 12 Sep 2025 00:00:23 +0000
Files and hashes: 1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: 4qIHH/4t4jT5TDowqDWuTzQ1kmKq2Pc0vlBKh4ke6Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:c2:3c:24:e1:6e:c3:41:7a:9f:7f:83:23:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Sep 11 00:00:23 2025 GMT
Not After : Sep 12 00:00:23 2025 GMT
Subject: CN=bce56cf4ea0ceda5cf443641a8a0ec766d26defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:a2:b0:7e:ad:ea:24:47:b2:52:42:0f:9d:
10:61:9c:98:70:14:ad:45:f8:30:33:83:be:2b:2b:
d8:30:a6:06:e5:60:b8:ef:f3:76:49:81:fa:08:83:
67:b1:83:a6:f9:79:89:20:96:22:7f:5f:71:ca:8b:
5b:dc:e9:cb:d6:8a:1c:ad:13:01:30:20:57:79:42:
4c:c4:90:e1:45:e3:2d:ae:fc:d4:bd:26:43:c1:21:
a9:7e:cb:93:c9:f5:63:09:b6:a5:52:01:a3:c9:d1:
c8:cd:5b:9e:b3:e1:31:c5:bf:3d:b2:b4:13:9a:9c:
c5:20:43:9d:f4:76:53:86:7c:41:05:55:f8:95:6c:
13:f5:01:10:98:07:f6:66:07:13:67:97:0f:88:94:
ac:cf:bb:56:3f:3d:e6:ba:66:11:c1:f5:50:29:0b:
61:40:4d:cb:89:28:bc:47:7f:b7:b7:85:7f:51:9a:
00:65:f3:d9:f7:7c:dd:6b:86:29:ca:e7:aa:ef:d4:
57:75:5f:e5:59:da:e3:dc:75:6a:c5:dc:62:6c:8a:
de:4f:1a:ba:0c:43:ca:99:2c:b4:be:0d:1e:41:1a:
34:30:b2:6b:e5:c5:c2:d4:e0:2e:4c:76:e5:d9:5a:
92:12:39:95:17:f1:6a:84:f8:9c:15:ea:87:83:35:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E5:6C:F4:EA:0C:ED:A5:CF:44:36:41:A8:A0:EC:76:6D:26:DE:FB
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:10:2e:ff:15:8d:9e:43:e5:c4:41:1a:b1:56:25:d6:74:
5a:32:23:0d:d6:69:25:db:97:68:77:0d:4c:94:f2:7c:16:c6:
91:23:88:ea:8e:3e:67:1a:d4:86:e8:c4:f8:e5:ec:f5:62:50:
e0:af:bc:93:ca:5b:de:32:26:bd:e7:82:92:61:47:af:4f:10:
4c:5f:b9:9f:b8:7d:f4:4c:d1:57:29:9e:38:53:15:40:6a:60:
3c:2f:6e:a9:12:1e:ac:fa:2c:2c:1a:41:bb:76:fc:ca:d6:58:
f0:f8:fc:52:ef:02:85:e9:60:fa:f4:52:a9:2e:f3:44:ea:68:
27:2d:f6:4d:2f:3a:a7:df:0d:85:9b:02:5c:ea:85:79:7e:25:
ca:37:15:04:2d:17:52:2a:1a:51:22:5f:9c:a6:54:e6:a6:ff:
c4:d3:1b:a4:30:83:ef:9d:da:20:39:a5:78:53:07:b3:49:9f:
88:de:2f:34:ce:9b:83:26:59:f5:a7:8a:6f:30:23:81:21:42:
67:3e:e9:d1:4f:e9:33:bd:60:70:80:39:56:5f:3c:6e:ed:7a:
a8:20:13:c4:de:56:61:c9:d2:3f:c9:7c:79:8b:6e:49:99:aa:
58:cf:30:e2:7e:e8:59:f9:08:7f:1f:45:a4:37:c8:db:3e:a4:
ea:34:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:44:04 2025 by rpki-client