Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: EPbzfvISKhB/tLOxXjnIZ3A2opkXTX8yz4HX7z/bACg=
Subject key identifier: D9:07:34:0E:8B:06:78:D4:47:91:EF:CD:C3:2B:5D:5B:D7:A3:FF:24
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019930B6058E4D2340299F4D7C0284AB63B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 23:00:59 +0000
Manifest this update: Tue 09 Sep 2025 23:00:59 +0000
Manifest next update: Wed 10 Sep 2025 23:00:59 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: VtHDyzSI6vB4Mpp0uoZywkd3YXDT5X7bAfH01yTB4I4=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b6:05:8e:4d:23:40:29:9f:4d:7c:02:84:ab:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Sep 9 23:00:59 2025 GMT
Not After : Sep 10 23:00:59 2025 GMT
Subject: CN=d907340e8b0678d44791efcdc32b5d5bd7a3ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:b2:8d:70:dd:79:f3:f1:ae:e4:da:cf:b4:
57:ec:c4:07:e8:f5:4c:ae:dc:a9:19:2d:47:64:82:
ae:7d:84:41:1e:3b:63:5f:29:42:37:94:92:7f:01:
cc:9a:07:36:ef:95:28:23:42:db:3c:93:80:3c:cb:
34:80:41:ff:9e:9a:00:1b:fc:30:01:09:14:37:8b:
9b:ed:25:aa:b5:43:55:47:4e:af:cd:17:ab:20:cb:
04:7d:13:de:87:8e:ba:f5:46:0a:2e:52:1c:eb:d4:
1f:e4:22:eb:ec:5e:e2:52:87:70:22:d9:33:23:23:
3b:09:4b:b7:0d:26:d2:86:c3:fe:0a:2d:9c:2a:04:
67:ae:69:61:ca:ec:36:5c:9c:37:35:5f:4a:44:1f:
d2:9a:65:b1:0f:0f:94:97:05:49:09:1a:22:5d:8c:
5e:93:dd:d5:1a:f4:03:eb:5d:ad:2c:9e:9e:6d:ef:
a2:e8:17:dc:3f:6c:27:a2:bb:aa:6e:6d:67:d7:31:
3c:ee:36:e9:5d:a3:57:a1:c5:56:72:be:c0:f7:16:
62:a6:c6:a9:64:ea:3b:59:c2:12:51:cf:98:c8:82:
5e:6d:71:9d:08:25:76:83:fd:27:37:6d:b5:00:15:
55:ea:18:b2:43:a5:72:f7:a1:60:8f:0b:96:19:84:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:34:0E:8B:06:78:D4:47:91:EF:CD:C3:2B:5D:5B:D7:A3:FF:24
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d6:09:ce:da:52:6a:51:e7:90:c9:ac:2e:9f:b2:10:ae:8a:
9c:2d:1f:1f:c5:46:f8:42:bd:86:8f:4e:da:17:01:6c:a3:93:
cd:84:66:c3:2e:8b:97:c6:7f:84:2d:71:d8:85:76:66:39:72:
0e:6a:1d:99:bb:ab:36:1d:46:50:96:64:77:08:b8:0b:ac:f7:
43:b8:39:24:aa:c2:f9:b6:07:a7:b0:5f:2c:a8:6f:b8:5e:69:
0e:14:90:38:71:f5:f0:aa:27:19:84:1e:f5:bf:8b:ab:64:93:
ec:4e:a5:6b:a8:59:76:bd:d1:9b:0c:38:de:86:09:1e:cc:4d:
f1:0d:6e:6a:ac:26:40:80:0d:22:1e:7a:9e:17:69:6c:43:3a:
ac:49:0b:eb:09:4e:c8:98:a3:a4:2d:ff:e6:f4:11:0e:85:dc:
37:ce:13:6d:ac:c4:3d:45:c5:f2:b9:20:5c:20:d1:07:aa:2a:
22:91:28:4d:f8:a9:53:41:fe:59:26:66:23:f1:b7:3e:a0:0b:
3c:ba:b6:52:61:56:0a:39:c8:8f:7d:4a:2b:12:56:4d:84:a3:
f5:0d:0f:e2:9f:d5:19:60:56:8d:2e:0a:b9:a6:4c:5b:10:ac:
ce:6e:4b:45:68:da:c5:00:68:d0:ae:7d:9d:95:7b:63:95:f0:
44:70:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:17:24 2025 by rpki-client