Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: z2CyBcoyv4J63egLcxp4XMxO7YTleCwPeuaYfz4PLy8=
Subject key identifier: 03:FC:C2:E9:23:07:3C:2B:A5:C2:33:33:49:CC:58:7B:A9:99:4A:19
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01993725ACE194BFD141599DE86B4D7B3479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 05:00:39 +0000
Manifest this update: Thu 11 Sep 2025 05:00:39 +0000
Manifest next update: Fri 12 Sep 2025 05:00:39 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: KuZbu03LawlkeWLrVbZEy0U5GuX0A3cJH8ALMniVDO0=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:ac:e1:94:bf:d1:41:59:9d:e8:6b:4d:7b:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Sep 11 05:00:39 2025 GMT
Not After : Sep 12 05:00:39 2025 GMT
Subject: CN=03fcc2e923073c2ba5c2333349cc587ba9994a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:2a:f6:8d:e9:12:78:ac:9e:83:78:ff:65:
47:7b:9b:6e:1f:d5:22:0d:b2:a7:03:54:d4:9a:a5:
9f:b9:05:3b:34:d6:6b:66:06:cf:fe:17:9a:1c:ba:
10:b5:9c:64:31:9d:f8:dd:6a:05:98:0c:70:2c:96:
5a:c9:1e:12:1e:a0:c3:38:4b:28:00:3b:04:48:b9:
b4:0e:34:65:1e:91:cd:6e:af:03:bb:11:d4:8a:26:
58:9f:78:c9:b0:fe:90:ea:f1:b4:67:a1:fc:ed:55:
1e:80:ef:48:6a:f2:ef:ee:05:62:fa:c5:43:f8:5e:
b3:e8:94:0f:00:c2:59:45:68:c7:e1:ff:3a:f0:e8:
1c:60:fe:06:19:e1:54:e8:bf:ba:4b:52:09:48:5b:
2f:5f:cb:b1:e1:3a:3b:3c:01:73:7c:1a:b7:00:e7:
6a:a4:3c:e3:99:5a:65:28:ca:ee:a2:97:cb:d0:0e:
18:20:37:40:f5:b3:68:ab:59:38:d4:c1:83:b4:c5:
ff:e3:68:93:d4:06:bd:10:1d:d0:9b:8f:3b:43:7a:
80:9a:91:04:29:18:88:a6:90:e2:fb:27:00:41:02:
ea:d8:ef:f9:2c:78:c3:d7:89:a2:bc:b2:cf:82:5a:
1c:59:8b:cb:a9:ff:36:29:75:23:39:98:22:58:34:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:C2:E9:23:07:3C:2B:A5:C2:33:33:49:CC:58:7B:A9:99:4A:19
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e8:3f:7d:46:ec:e9:94:79:b4:b8:10:96:82:47:9b:05:97:
cb:d4:d6:06:43:43:52:ec:29:83:84:e7:44:f6:44:4e:68:49:
72:64:ec:7f:31:bb:a5:32:c0:1b:d2:9d:eb:a3:a3:79:64:ba:
25:f3:4f:4c:84:a0:73:19:86:34:65:6b:40:65:b5:7e:f9:ea:
c7:4f:c1:83:fa:f6:37:95:85:d3:46:60:38:43:0f:3a:0e:d1:
f6:11:68:38:21:5f:4a:90:e8:a7:50:26:cd:40:a3:3a:46:23:
56:8a:98:00:e1:c4:10:b2:b5:20:6f:bc:17:4c:63:a1:ba:1a:
e0:42:64:29:95:28:0f:6b:58:cd:e8:df:05:cf:7f:64:68:67:
84:42:5f:1f:8a:a3:fd:da:96:03:1d:12:14:e3:3b:2b:03:cf:
f9:99:45:61:49:6e:5d:3c:94:e6:08:b9:3f:e5:4b:2a:2e:1d:
1e:7b:6f:7b:3a:cd:40:50:0a:18:fc:c3:aa:cf:ed:2d:a4:27:
ec:b2:d6:d8:47:6b:b5:4e:87:47:66:7c:13:ec:02:a8:b8:49:
f4:2e:2e:f1:d6:d9:fa:f1:9a:f7:d8:7f:05:d6:f1:7d:8b:0a:
f1:23:95:b6:70:25:19:9f:72:63:f1:9e:00:11:69:1a:02:f1:
77:1c:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:36 2025 by rpki-client