Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: yJmEJiBoDKgJPhzzvFoWASFJFmmMyEcUq0KWBEmtzkc=
Subject key identifier: 59:D3:06:7C:7A:05:55:B5:1E:39:B7:BC:47:73:03:5D:9C:D4:86:9E
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019961D93754D518D5CFD6C6B80DD51A0E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1561
Signing time: Fri 19 Sep 2025 12:00:49 +0000
Manifest this update: Fri 19 Sep 2025 12:00:49 +0000
Manifest next update: Sat 20 Sep 2025 12:00:49 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: 1Xj52dNPCz73YyVasRsSGReRYz+G7d6Ap5ZHvtxWWpk=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:37:54:d5:18:d5:cf:d6:c6:b8:0d:d5:1a:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Sep 19 12:00:49 2025 GMT
Not After : Sep 20 12:00:49 2025 GMT
Subject: CN=59d3067c7a0555b51e39b7bc4773035d9cd4869e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:94:d3:90:a3:12:b5:99:cc:23:32:d3:d0:
68:55:39:e9:4e:17:2e:ae:39:dd:fd:82:aa:bf:83:
7f:9c:6d:77:45:99:b8:1e:92:11:84:ba:41:1c:6a:
aa:78:ba:3b:9e:5c:88:3b:1b:9e:33:70:9d:2d:f0:
86:a3:2d:84:7a:d6:80:cd:32:07:94:33:21:9c:4c:
ad:32:ed:38:60:67:05:85:60:c8:69:9c:8f:56:e2:
03:41:b4:2b:15:9c:c4:33:00:47:35:ca:68:06:1b:
91:b6:7c:29:59:98:11:0f:13:12:5d:c2:8a:c6:f3:
bb:b7:b3:c1:35:03:97:04:4c:1f:ec:ac:06:8f:83:
d2:f4:08:cb:49:a8:c0:98:22:f3:16:5b:d8:a6:55:
5d:d5:18:ac:4f:3d:21:79:75:3f:a8:04:1c:2b:dc:
25:3f:70:da:4d:70:d0:6b:02:71:a3:80:d7:d6:cb:
a2:ab:ab:86:4c:b9:d3:6a:93:b4:14:7f:b3:69:9a:
b3:18:89:35:f0:e8:55:c1:38:14:91:d7:80:fc:03:
2f:bc:e2:a0:15:dd:f9:68:69:5d:96:33:04:d7:08:
76:ec:f9:7d:ad:14:55:7b:5c:5b:80:7e:2d:b5:10:
45:35:39:b2:a4:f6:75:1a:cf:5e:fb:55:03:ec:1b:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:06:7C:7A:05:55:B5:1E:39:B7:BC:47:73:03:5D:9C:D4:86:9E
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:bf:5a:ca:29:47:dd:06:16:59:14:b1:41:43:36:4a:1f:
a9:60:03:3d:f4:66:01:94:91:19:e6:a0:07:bb:b2:62:92:30:
5f:69:0d:8b:7c:10:1c:6f:dc:bb:0c:d3:09:c6:b1:e9:cd:39:
c9:3d:80:de:78:17:cc:8b:04:fc:8c:98:b3:d1:ec:c7:90:39:
9f:52:97:98:63:9c:83:0c:68:a4:51:53:5b:e3:0b:cf:c7:70:
02:35:51:b4:46:3e:10:05:b7:8e:ef:0b:f9:5f:93:cf:3c:3d:
3a:e0:79:84:4d:a7:b9:ec:d2:7f:46:2d:1b:e6:63:3b:f8:0a:
24:a7:03:26:e0:da:8c:43:21:9c:e7:38:37:c0:e5:fb:a7:f2:
52:79:63:19:d8:38:2c:b7:95:b1:f1:3b:e2:95:8f:9f:7d:ac:
68:42:a1:bf:a0:42:83:b6:2f:aa:ca:98:f8:c6:33:8d:96:72:
a8:f6:7a:3c:08:17:22:da:ac:b2:f9:b2:e8:78:1e:8c:ed:63:
d3:df:80:7e:e9:ba:a5:3d:20:56:cf:60:52:74:3d:10:e2:a3:
cd:dd:b5:21:a4:01:8d:42:a9:c3:db:d4:58:d5:26:2a:09:f9:
0c:b1:9d:74:d1:5a:2f:b5:27:7c:10:b3:a6:6e:3c:70:fd:cc:
7b:d8:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:31:48 2025 by rpki-client