Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: nVH+skkuwG8C4lOQ/u4XMJHx0t6FcKAib8+8aP9kmTI=
Subject key identifier: 9F:57:A8:F8:A6:31:CE:3E:FE:C5:91:07:35:F9:14:3B:E4:62:1F:FB
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01993191C0AB947F285C3D7E00D9F6B15A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 03:00:59 +0000
Manifest this update: Wed 10 Sep 2025 03:00:59 +0000
Manifest next update: Thu 11 Sep 2025 03:00:59 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: S5wU97jpkSBQT7MZRCZtK6a7cno9l8yf2M6menjCafw=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:c0:ab:94:7f:28:5c:3d:7e:00:d9:f6:b1:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Sep 10 03:00:59 2025 GMT
Not After : Sep 11 03:00:59 2025 GMT
Subject: CN=9f57a8f8a631ce3efec5910735f9143be4621ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:b0:cc:47:1a:c1:8c:22:4d:49:83:ca:c6:
a8:db:99:48:a8:a9:9c:cf:f2:36:a0:99:43:14:d8:
1a:62:fa:ba:a9:99:00:cb:ef:ab:7b:8a:5c:43:1b:
19:d1:7a:a0:6f:e7:11:0c:06:d6:40:9c:61:44:eb:
a8:71:34:4b:08:ad:a0:6a:cb:44:ac:1c:c6:c8:0f:
15:fe:1f:64:70:3c:a5:a2:32:38:0e:da:84:56:95:
c5:1d:10:66:35:bc:36:a0:f1:05:3f:af:8b:f8:cf:
96:9b:cf:27:f7:fe:d8:e8:62:43:85:1d:71:c1:b0:
f9:fc:bf:75:d4:e1:ee:4d:30:1a:4f:ec:fb:0e:d1:
0e:c1:59:48:2b:c0:80:2b:1b:72:db:ba:a1:1f:bf:
10:87:fa:c5:79:98:18:53:5d:55:1f:ca:19:f6:b1:
a7:6e:e2:32:0c:9d:91:af:dc:40:38:94:ab:a1:2c:
36:35:f8:5b:46:da:d2:b8:be:29:17:88:d0:95:1d:
a1:51:5f:b7:f5:15:ce:52:14:03:22:cd:2c:b0:d9:
09:76:06:1a:cb:c0:f2:17:b4:40:dd:f7:0e:21:a1:
3c:ca:a8:04:49:75:56:e4:8c:f3:24:a9:6f:6e:81:
9b:10:d4:6c:22:d1:6f:53:87:9a:27:cd:d4:cd:34:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:A8:F8:A6:31:CE:3E:FE:C5:91:07:35:F9:14:3B:E4:62:1F:FB
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:34:2d:56:d9:3b:43:17:da:81:ff:48:af:4a:d3:68:7e:
9f:a3:0c:6c:2b:d8:89:c2:f3:0e:90:b1:87:9e:7f:91:65:d0:
58:d2:05:2b:9d:3b:2d:d2:ed:c3:16:77:4f:77:52:f6:ed:03:
1d:fd:ac:bb:d1:0f:35:84:05:3d:89:fe:2c:ff:2b:92:ec:66:
c0:c0:a8:92:a1:39:0a:4b:36:c1:d4:9b:fe:03:4a:93:54:36:
8d:54:e0:87:3b:19:bb:73:c3:eb:63:9f:50:d1:56:13:f4:29:
34:11:29:51:35:91:8b:91:b7:3e:97:55:ce:57:38:e0:49:d7:
4b:7e:83:4d:86:78:b9:98:ca:7e:42:76:a5:f9:aa:eb:ab:34:
af:37:2d:43:93:56:a3:75:33:e9:5c:07:ff:5e:c2:f1:51:43:
87:a8:ee:95:13:95:bf:15:48:97:6e:e8:60:c0:1e:53:15:ff:
04:d2:78:6c:ea:83:49:70:4f:24:48:68:57:48:72:00:6b:e9:
2f:43:1e:d1:64:73:e8:07:e1:dd:51:61:f2:66:00:2d:77:57:
f7:ea:e1:a7:bb:5f:e4:30:42:b0:8f:1c:ed:dd:c9:de:56:0c:
f1:de:73:9a:14:9d:60:a4:65:7e:1f:a1:5b:98:f1:b5:47:43:
a4:bf:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:32:15 2025 by rpki-client