Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: 6wIscG/KOKkXb7Won8JtDSUKdQGVbFAXo/qrBu9KZuE=
Subject key identifier: 59:BD:49:EC:CD:D1:A6:54:33:25:31:16:98:07:5F:22:67:02:F7:02
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019923A080FD0D98C37CA40516D1217FC0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 147E
Signing time: Sun 07 Sep 2025 10:02:25 +0000
Manifest this update: Sun 07 Sep 2025 10:02:25 +0000
Manifest next update: Mon 08 Sep 2025 10:02:25 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: /jFwMmxin3Zqk437v3jmDhARlTR2k0MhveWfeymppkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:80:fd:0d:98:c3:7c:a4:05:16:d1:21:7f:c0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Sep 7 10:02:25 2025 GMT
Not After : Sep 8 10:02:25 2025 GMT
Subject: CN=59bd49eccdd1a6543325311698075f226702f702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:82:96:da:de:f6:6e:16:d8:92:e5:93:eb:
44:52:93:32:3b:bb:b0:75:5f:d4:6e:44:d8:c2:51:
8d:68:22:80:5e:01:a5:98:6e:8d:2c:7e:18:fa:12:
32:c5:f6:d5:77:ea:77:9e:fb:e8:c1:f6:04:a2:23:
27:4c:14:dd:37:75:b7:62:98:30:6b:7c:32:5d:c5:
4f:b1:65:7f:2b:5f:76:bc:d4:d4:d4:e4:fe:d7:63:
42:65:57:c2:14:91:6a:9d:79:46:bf:2b:96:48:ae:
73:25:94:71:fa:03:3f:8d:72:7f:d6:e3:12:ee:2e:
71:e7:03:06:a5:30:17:e6:2b:0c:26:3e:86:0d:ab:
72:7f:8e:b4:c5:b9:7d:be:c8:1b:78:42:5f:bb:d9:
71:0b:3b:66:78:27:65:d2:82:28:63:4d:39:08:98:
cd:e1:8f:da:5f:dd:45:16:24:8b:19:a4:fe:d1:c5:
6f:87:56:20:79:48:03:3d:4a:71:8f:40:e4:73:9e:
d6:e1:71:8f:40:b4:de:69:b7:ac:b7:23:1c:f4:a5:
49:f8:cb:bc:92:2e:7e:e3:07:7c:e3:2b:2f:3c:14:
60:21:e7:9a:1b:10:81:39:d4:c8:f2:3a:56:b1:08:
cc:42:c3:14:d0:55:e0:85:37:d9:53:26:8d:30:ab:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:49:EC:CD:D1:A6:54:33:25:31:16:98:07:5F:22:67:02:F7:02
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:26:a3:22:e7:d9:bb:72:8a:a7:ed:a1:d2:d8:d5:0d:ac:38:
70:50:f9:f9:c5:12:1a:d7:f2:4a:db:e7:a0:97:1a:f4:61:9d:
f5:f6:ff:fc:02:ba:21:67:4c:8a:c4:bd:e4:6e:c5:6c:dc:30:
19:94:71:37:88:71:11:74:0c:44:40:ea:90:13:de:8f:b2:be:
3a:9e:51:67:64:27:05:30:b1:01:08:14:9c:e4:51:24:de:3c:
28:e2:ca:00:56:09:ed:3f:0d:8c:09:9d:a9:99:d9:68:91:33:
39:cd:10:cb:cf:9f:cf:cf:9d:04:96:75:16:ac:a0:f4:29:bd:
6d:49:29:19:a4:1f:a1:6f:3d:92:30:d4:cf:48:9e:51:bc:92:
e7:a2:42:cf:a7:7c:81:81:ca:be:a3:3f:11:3a:b2:55:75:49:
a5:e0:37:62:65:6a:47:4d:9e:b6:29:49:e6:ac:98:26:4a:48:
98:0a:bf:43:83:ba:7a:e0:cd:c1:68:b4:3b:39:b9:ed:8a:bd:
e8:41:ff:ed:06:5e:53:c0:31:82:8b:25:ca:da:bd:ec:f0:28:
38:9b:0f:4f:6c:53:8f:b0:76:d1:be:ca:15:3d:e5:07:d3:04:
83:e5:2f:2a:36:77:45:29:8d:33:54:8a:ea:50:ad:e9:c5:e9:
7f:e5:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:36 2025 by rpki-client