Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: TzTL+8h10q3wyuhV+nLxMDxt1AxnMxHLYyxj989GG8g=
Subject key identifier: F7:60:5D:94:59:B3:58:6E:55:38:A6:7C:79:35:CC:EC:AC:53:DA:0D
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019922FA9A150F6E1927A8755AB466C5230F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:12 +0000
Manifest this update: Sun 07 Sep 2025 07:01:12 +0000
Manifest next update: Mon 08 Sep 2025 07:01:12 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: nDahNzBvLdR7MjVXLRt3C/75Uiab6AOg+X1y3vsKn8Q=)
3: tYbAWeHoGjW4_0OkM4yMqFJOybI.roa (hash: htZo5UqGGeI3toMrh3D8Z6/VXgbSZywSkH3LLl1S9Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9a:15:0f:6e:19:27:a8:75:5a:b4:66:c5:23:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Sep 7 07:01:12 2025 GMT
Not After : Sep 8 07:01:12 2025 GMT
Subject: CN=f7605d9459b3586e5538a67c7935ccecac53da0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:06:60:b4:3e:a0:01:1b:b3:85:bc:f2:73:
9a:fc:4f:89:70:01:be:58:23:92:a2:fc:17:b1:86:
6b:02:44:21:ca:f7:e7:1f:94:b4:06:71:89:da:07:
20:1f:d3:9f:d2:48:87:67:ff:aa:2f:55:85:1f:3f:
74:c8:03:56:91:26:d9:58:8b:ec:98:01:1e:89:06:
3b:71:50:51:74:54:01:d7:24:5b:36:62:89:29:3a:
28:26:7b:4e:ac:19:0d:61:c1:98:6d:e2:12:1e:e9:
44:4f:75:39:bf:7c:24:25:a9:6d:af:ce:4f:5e:86:
b3:86:fb:b9:a4:fa:68:54:41:fd:cb:ee:43:bf:78:
d9:06:e6:00:c4:6d:0b:da:cb:13:bb:59:6a:9c:48:
40:1d:bb:4d:d4:29:25:d6:e3:c7:6f:6e:42:16:a6:
c9:7c:d3:77:04:18:7e:e0:fa:bd:d9:92:83:8e:41:
1a:e3:62:f3:9d:58:6b:1d:82:5d:f8:45:4e:d6:6f:
fb:38:21:74:da:21:10:58:e9:cd:f5:0f:28:ca:99:
23:95:22:dd:0c:69:6e:75:0f:95:10:37:6e:87:2d:
4c:7e:1d:34:88:33:b5:55:a2:d6:21:00:cc:78:1d:
3b:c6:84:7c:0c:ff:bf:ed:bd:58:96:ab:02:a5:54:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:5D:94:59:B3:58:6E:55:38:A6:7C:79:35:CC:EC:AC:53:DA:0D
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:64:90:e2:b8:58:d4:b6:0e:7f:c6:53:58:88:5f:3b:de:
38:0e:c0:7a:07:26:43:4e:c7:87:87:6b:be:96:71:87:1b:a6:
fe:ab:4a:15:32:f3:f0:c0:f4:80:8c:c4:5f:7f:4c:a1:3b:03:
14:9f:88:3e:87:fa:c3:25:95:87:a2:bb:6a:fa:1f:72:c5:bc:
b2:69:a8:fe:ec:1b:e1:7c:16:a1:94:87:aa:fb:b8:68:7b:e3:
08:46:f6:aa:1a:a6:65:fe:d1:55:07:aa:3b:98:f2:c9:ff:74:
89:77:10:03:9a:d9:2b:21:9f:a0:37:67:54:33:31:82:d3:34:
01:3c:03:0d:00:72:86:30:6e:27:6c:3c:0d:a3:42:6e:bc:b8:
f5:c1:37:9c:2d:a6:da:46:e3:8d:61:be:7a:3a:1f:ea:ae:a6:
b5:91:b3:f5:98:56:c7:7d:6a:6f:ba:92:9e:da:25:0c:f4:06:
6d:6c:ff:60:d6:df:9b:57:ed:75:38:99:49:bc:00:3d:18:a0:
60:48:aa:c2:6b:9f:bf:2f:9c:4a:90:74:1a:59:7a:18:ac:cb:
09:37:1c:c6:f9:c1:5b:5c:68:16:b6:8d:31:da:aa:14:85:21:
c5:3b:8e:e5:75:21:b3:08:b4:9a:bb:7e:65:f6:a7:79:3c:4e:
50:fb:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:25 2025 by rpki-client