Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: g5tq4Jxn7QlfNijBvoicUUnvZ5UjUiLvVHngezMk9Ug=
Subject key identifier: A5:FD:75:40:18:85:B0:68:9A:D8:71:83:D7:24:2C:B3:E2:5C:19:E9
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 0199331208990CDB561F4D2E830C5E6141F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 10:00:43 +0000
Manifest this update: Wed 10 Sep 2025 10:00:43 +0000
Manifest next update: Thu 11 Sep 2025 10:00:43 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: mwJq3+Z3RU4lnOW8aEdDL03BUeS1Y2aPe1e47RgpFjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:08:99:0c:db:56:1f:4d:2e:83:0c:5e:61:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Sep 10 10:00:43 2025 GMT
Not After : Sep 11 10:00:43 2025 GMT
Subject: CN=a5fd75401885b0689ad87183d7242cb3e25c19e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:07:73:4c:42:d6:6b:64:1c:fc:8c:db:e3:
09:13:26:76:86:89:47:a7:80:5d:a7:33:e7:3c:ef:
32:32:49:2f:e2:be:e0:b9:90:aa:bd:cf:33:11:77:
d3:d2:2d:20:b9:fe:8e:ac:54:83:06:30:e4:34:ff:
af:b3:d8:a6:43:e6:56:b0:8a:fb:e5:91:5c:f4:ab:
e6:fd:51:0e:28:56:4f:c8:63:29:1a:bc:32:23:06:
4c:e4:51:2f:37:22:9c:c8:4d:28:e4:ad:11:e1:0e:
56:b6:ac:72:65:5f:fe:1f:a9:6f:b8:36:40:61:0d:
83:5c:20:9a:c4:9e:8d:4b:cc:69:dc:a3:06:52:73:
26:03:0e:1b:71:6a:5e:09:bd:a9:31:56:df:b3:a1:
3a:f8:90:46:a5:9f:95:00:36:5b:52:d3:6a:21:e5:
c7:57:53:56:6d:8e:e5:28:f6:43:a1:e6:01:b5:7e:
dc:f6:b0:57:ce:16:31:08:69:34:3b:cc:6b:81:01:
21:18:b5:fd:e6:cf:9b:be:e4:87:1a:0c:53:0a:6f:
d4:2b:b6:11:03:76:da:99:58:55:d3:80:5c:03:d0:
2c:d4:6b:38:bf:1d:e5:ac:eb:39:e2:06:0d:d6:d7:
4c:43:bf:0f:d8:a5:d3:e3:33:18:97:18:e8:c8:6f:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:75:40:18:85:B0:68:9A:D8:71:83:D7:24:2C:B3:E2:5C:19:E9
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:6a:c6:bf:32:ae:7c:db:f2:15:09:24:75:d5:c9:a1:d4:
a8:1d:f0:4c:c1:c5:bf:71:46:9f:a2:20:a8:c1:5a:92:ff:2d:
ae:9c:2a:71:22:7b:67:89:0a:8d:6c:cf:83:cb:2b:f3:82:bd:
3a:7e:a8:d8:13:eb:f7:dd:2b:11:de:b2:c7:47:11:04:c2:91:
db:12:d5:7d:b1:97:8b:9f:22:2f:c8:0f:82:16:ef:1a:b0:45:
96:b5:97:dc:2c:34:35:09:f8:a2:eb:b4:8d:4a:13:23:1b:66:
7c:02:0f:8d:9f:74:29:e7:28:99:44:68:5d:cd:83:0e:92:22:
63:53:ca:02:88:47:2e:04:40:8a:fc:78:c2:05:79:00:cb:54:
60:2e:c3:20:1b:b5:38:9b:ef:63:95:ca:87:ad:27:fd:ca:5b:
31:03:79:27:a1:1f:a7:2c:ff:eb:22:a4:4d:d1:67:c0:0f:e1:
cc:8a:a3:62:96:ab:b4:aa:a2:70:a3:69:3e:67:03:23:03:ce:
a3:f2:85:86:22:05:69:5d:03:54:fa:5f:e3:10:f3:32:10:a8:
a1:b4:31:e9:b7:af:4f:f9:9d:af:3e:d2:5f:69:a2:f3:43:46:
56:32:88:4d:69:74:ea:9f:b1:b5:6c:e1:fd:89:68:68:09:b6:
72:32:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:03:36 2025 by rpki-client