Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: 9XG7RZMqzOf1ck42oDWNKpKYwnIJmCym7kxvY7wYEv4=
Subject key identifier: CE:9B:59:68:B3:FA:54:62:45:90:9D:16:59:9C:F4:D5:1F:DE:25:36
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019933B6B9CCA58A57A8D0BC3ADAAC6793C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 13:00:37 +0000
Manifest this update: Wed 10 Sep 2025 13:00:37 +0000
Manifest next update: Thu 11 Sep 2025 13:00:37 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: 0kdQxdvD5ea7RtiafWnrUdVVjr68ZWLkHlYP28O5TJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:b9:cc:a5:8a:57:a8:d0:bc:3a:da:ac:67:93:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Sep 10 13:00:37 2025 GMT
Not After : Sep 11 13:00:37 2025 GMT
Subject: CN=ce9b5968b3fa546245909d16599cf4d51fde2536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:57:2d:86:34:41:71:7d:ad:1b:2c:34:42:
4e:a9:f9:7e:30:ae:67:b3:64:d0:61:c6:0c:76:cd:
bb:11:66:4f:7e:85:71:53:99:68:4a:73:af:79:39:
f3:1c:80:cd:f3:16:01:2a:6c:b3:0a:9e:3e:77:dc:
df:59:d0:38:8a:57:57:cf:69:d5:f3:80:e9:fb:2b:
7c:d8:4a:5e:14:d3:27:a5:d8:bf:fe:c2:bd:34:56:
e5:68:1e:c5:7c:dc:4f:56:4e:5b:8a:f4:12:b1:a7:
48:82:3f:55:ad:0d:d6:2a:f8:3d:48:1c:b6:27:2e:
20:ae:9c:00:c3:b3:a4:6d:e4:e4:cf:80:11:da:18:
b2:1d:9b:f7:b5:ee:af:95:b1:bb:72:04:61:10:5d:
55:08:a3:d4:8a:a0:a9:26:9c:5a:14:ac:ad:73:d9:
af:06:03:c8:fc:1d:51:36:8d:b4:f2:90:36:98:b7:
06:38:1f:c5:bf:79:1f:02:d7:0d:17:b0:f9:37:6e:
de:9d:e7:d5:09:bd:bc:37:7b:06:72:f1:d8:bc:a7:
d7:d5:ee:22:02:bf:8d:1f:ec:6f:19:ca:7a:b4:6c:
7f:12:2a:99:d0:3c:56:0f:54:2d:d1:4f:69:59:a4:
c4:4d:1d:48:c2:77:e7:91:93:14:84:45:bb:4f:8f:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:59:68:B3:FA:54:62:45:90:9D:16:59:9C:F4:D5:1F:DE:25:36
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:5d:49:64:7c:40:95:79:b6:60:d1:d5:d4:8d:79:d2:71:
1f:d7:bd:ac:d0:72:95:6e:62:cb:96:e8:89:50:39:58:98:05:
3b:9a:4a:b2:59:e9:3c:ac:c2:66:10:24:5d:6c:cc:f5:e2:c0:
67:2e:89:14:c9:b6:8b:b9:2d:38:07:e2:7b:13:8c:8f:fa:79:
17:95:da:79:df:b4:74:76:70:1b:5f:d4:fd:36:62:ea:1d:b6:
65:3c:9e:bb:f3:37:cb:bd:b6:cd:29:17:e5:2b:1b:01:ec:0b:
77:07:6a:78:9b:4e:c7:0e:7e:e5:52:6e:70:3d:f4:f4:25:06:
c4:d8:8a:00:db:e4:4e:70:2a:09:af:69:c5:6e:b2:73:00:f8:
d2:92:b1:e6:87:87:cc:c1:b6:4b:d2:b6:72:65:b7:3a:6a:87:
b0:13:12:d1:f9:61:e7:fe:e0:f9:ab:38:4b:85:6e:da:d8:30:
29:31:40:ce:b4:06:d9:d7:81:ca:8d:e4:6b:93:a3:85:9d:c7:
14:c3:02:12:ab:cb:0b:e4:0d:f4:0b:bc:4a:20:ea:ab:74:1b:
66:d1:7d:02:ef:11:ce:65:03:a6:95:45:8f:69:bb:e5:fa:b3:
2d:c3:9e:94:37:cf:e2:8c:32:bb:92:35:50:f0:fe:d2:60:aa:
44:bd:b3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztrnMpYpXqNC8OtqsZ5PCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy
NGQ0YzkwHhcNMjUwOTEwMTMwMDM3WhcNMjUwOTExMTMwMDM3WjAzMTEwLwYDVQQD
EyhjZTliNTk2OGIzZmE1NDYyNDU5MDlkMTY1OTljZjRkNTFmZGUyNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZdXLYY0QXF9rRssNEJOqfl+MK5n
s2TQYcYMds27EWZPfoVxU5loSnOveTnzHIDN8xYBKmyzCp4+d9zfWdA4ildXz2nV
84Dp+yt82EpeFNMnpdi//sK9NFblaB7FfNxPVk5bivQSsadIgj9VrQ3WKvg9SBy2
Jy4grpwAw7OkbeTkz4AR2hiyHZv3te6vlbG7cgRhEF1VCKPUiqCpJpxaFKytc9mv
BgPI/B1RNo208pA2mLcGOB/Fv3kfAtcNF7D5N27enefVCb28N3sGcvHYvKfX1e4i
Ar+NH+xvGcp6tGx/EiqZ0DxWD1Qt0U9pWaTETR1IwnfnkZMUhEW7T4/JTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6bWWiz+lRiRZCdFlmc9NUf3iU2MB8GA1UdIwQY
MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt
YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0
LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj9dSWR8
QJV5tmDR1dSNedJxH9e9rNBylW5iy5boiVA5WJgFO5pKslnpPKzCZhAkXWzM9eLA
Zy6JFMm2i7ktOAfiexOMj/p5F5Xaed+0dHZwG1/U/TZi6h22ZTyeu/M3y722zSkX
5SsbAewLdwdqeJtOxw5+5VJucD309CUGxNiKANvkTnAqCa9pxW6ycwD40pKx5oeH
zMG2S9K2cmW3OmqHsBMS0flh5/7g+as4S4Vu2tgwKTFAzrQG2deByo3ka5OjhZ3H
FMMCEqvLC+QN9Au8SiDqq3QbZtF9Au8RzmUDppVFj2m75fqzLcOelDfP4owyu5I1
UPD+0mCqRL2z1A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:21:05 2025 by rpki-client