Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: /mojPouO7YgMG9UZtZ3NheOGRyaZKATHKkOpfyMM34s=
Subject key identifier: 53:A5:C6:EF:F8:DF:AE:2C:4E:12:AD:86:FF:C3:74:1F:91:F5:BA:DE
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019922C37E716148F254C85723C9431D170B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: 5x19TJAF6MG3RsRCZTS49ps8Cuz+j0SK6LetQHMysKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7e:71:61:48:f2:54:c8:57:23:c9:43:1d:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=53a5c6eff8dfae2c4e12ad86ffc3741f91f5bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:86:40:84:78:d4:75:a9:20:21:bf:2f:37:
9d:fa:16:c0:17:3e:17:41:e4:61:f5:8c:39:a6:cf:
ef:d0:8b:33:d3:52:3a:6e:89:8a:86:b4:d8:f8:d7:
47:c1:cf:58:df:5d:8e:31:7a:9a:a8:0a:36:ae:74:
b2:b7:f9:d3:85:9d:87:d7:4d:d8:35:a3:94:38:da:
13:71:12:96:87:73:37:e5:79:23:b6:bc:f8:54:07:
16:3a:14:da:76:77:57:5f:90:58:26:2c:7d:04:a5:
92:b1:b0:dc:3a:8c:5e:1e:a7:99:49:7c:4c:6a:f5:
bd:10:c0:3e:0b:11:b3:22:39:c5:1d:0f:e5:68:83:
90:0d:fd:cf:6a:72:6c:84:00:31:b3:29:41:a3:11:
73:d0:ff:75:3a:41:be:a3:8b:de:d2:53:d4:75:e7:
f8:22:1c:39:90:1e:8b:72:15:3f:f7:c0:69:66:88:
f5:78:60:81:c9:49:7b:7e:d6:bc:3f:f7:de:c0:49:
36:89:af:c3:45:bd:1c:84:38:5b:91:4a:4c:0b:44:
2b:6c:7d:26:a6:a8:2f:37:d0:4d:3e:7e:5f:bc:0b:
0a:f5:79:bc:59:ee:2b:17:e4:0e:90:bc:77:df:85:
2e:48:5f:ea:d4:98:06:46:32:76:a9:de:0a:1b:1c:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:C6:EF:F8:DF:AE:2C:4E:12:AD:86:FF:C3:74:1F:91:F5:BA:DE
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:4c:3b:b7:b4:0a:e4:e1:0b:33:37:9e:1c:0e:d9:5d:1e:
fd:d1:de:11:90:6a:57:46:b5:7f:f2:7d:bf:dc:71:e8:42:9d:
83:85:da:ba:3d:93:e6:f9:f6:00:6d:00:78:30:a1:a2:d6:60:
ba:17:2a:11:5e:ab:c0:0e:dd:4e:df:ee:e0:3c:36:68:99:53:
1d:d1:7a:a9:f4:74:6d:b4:3e:5c:eb:2b:28:62:b2:25:b0:5c:
cf:c7:92:87:62:ae:32:4e:3e:bc:5e:23:17:da:c0:c7:75:8a:
63:84:52:11:39:d3:bc:6f:3f:75:28:1a:fc:dd:7e:b9:39:a7:
bd:f0:b9:a3:cc:77:18:5a:fb:78:44:aa:61:17:48:5b:49:05:
e4:b1:23:a7:7b:41:6c:38:6d:c1:36:1d:66:43:93:f2:df:1a:
02:90:ae:41:ad:18:f4:30:93:49:f7:fd:a0:c9:fe:d6:d9:aa:
45:63:d4:9a:bc:4a:8e:f3:ec:63:87:79:13:5e:eb:2d:36:0d:
ce:a9:a9:d6:bc:53:9c:c5:09:59:5f:ec:8a:b0:f6:2c:7a:ab:
6c:d5:e7:8c:bc:aa:99:91:c6:d0:a8:58:2e:86:9e:08:b8:ee:
3f:c4:ae:43:af:c0:2e:e2:24:70:74:5e:59:c5:9d:b9:2a:18:
2d:7f:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:16 2025 by rpki-client