Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: cJYhmGhNSHaHne2Ai3zCb/Do63y0rsBqQ2XEb+PMhok=
Subject key identifier: 08:55:85:05:BF:8F:C8:5E:79:9B:2F:9A:89:8A:A4:E0:9A:64:8B:28
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 0199345C5BF7A699216322E192AD315C4811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 16:01:32 +0000
Manifest this update: Wed 10 Sep 2025 16:01:32 +0000
Manifest next update: Thu 11 Sep 2025 16:01:32 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: hsTlqyPS7fsIyynq0Cm0sRit5H1+eBVCy5CD6oNWtz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:5b:f7:a6:99:21:63:22:e1:92:ad:31:5c:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Sep 10 16:01:32 2025 GMT
Not After : Sep 11 16:01:32 2025 GMT
Subject: CN=08558505bf8fc85e799b2f9a898aa4e09a648b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:0f:5f:00:5e:de:42:ea:a1:29:43:74:f9:
e7:a4:92:20:85:73:fc:35:b9:ce:2a:a3:1d:99:84:
93:36:82:09:34:20:16:b3:f9:2e:e9:d4:02:6e:09:
14:a5:96:3e:09:fb:8d:32:d8:2e:4f:84:47:ee:51:
68:32:72:0d:0d:6b:95:9b:21:70:32:2f:67:28:cb:
eb:90:91:ba:28:c1:c8:d1:50:24:f9:90:1c:43:72:
99:fd:2b:4f:08:87:8c:ec:96:57:79:c3:fe:b2:26:
03:18:06:e0:18:6d:f2:bf:86:a7:37:76:21:d2:f3:
d9:c5:aa:4d:92:8f:20:f4:bd:ac:ef:32:03:f6:94:
b3:d5:e2:62:77:14:8e:a8:74:0a:07:2a:a3:ba:b0:
e7:44:f9:78:52:df:4e:6e:bc:1a:54:12:8f:66:8f:
32:2e:87:ef:a4:2a:39:42:a0:bb:1a:26:61:bc:d2:
60:22:01:77:23:09:a8:1f:c9:69:8c:73:43:aa:f7:
f9:51:70:e4:ec:48:a9:1d:94:82:23:d0:89:97:33:
19:3b:aa:a7:7b:6b:52:ea:72:2c:ae:c6:6d:a1:a5:
91:b3:f7:76:33:63:f8:61:2d:50:45:8c:42:79:fb:
a7:10:31:d0:79:95:c3:d4:e8:ba:95:29:d8:99:20:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:55:85:05:BF:8F:C8:5E:79:9B:2F:9A:89:8A:A4:E0:9A:64:8B:28
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:57:94:08:40:99:40:45:f9:2c:ff:16:4c:0d:82:24:92:d8:
03:0f:11:d5:0f:3d:eb:0b:46:4b:5f:20:6b:58:ac:df:af:2f:
56:04:e7:93:42:7e:ea:ae:c4:a0:f0:e2:22:e3:b1:eb:87:38:
51:3b:13:68:df:73:ac:45:3b:3f:54:ce:5d:ab:84:ff:ae:a2:
2c:6c:2b:1a:de:df:2c:58:8f:79:86:89:e4:36:f0:5c:6d:e5:
97:13:a2:49:02:5f:89:c0:f2:02:6b:dc:58:25:04:b2:d1:06:
14:a2:aa:e2:b1:3a:36:4e:a1:7b:54:de:a4:8e:7f:4e:60:a6:
19:52:db:25:1c:56:8a:3e:09:7e:38:bf:23:8c:65:eb:2f:72:
0f:c8:1a:a8:72:f0:94:67:8e:3f:45:86:17:57:d1:60:d4:0d:
f6:c8:2a:70:4b:e7:69:38:62:ee:45:7c:51:eb:bb:39:23:ef:
6b:62:8d:6e:70:e5:b6:2d:95:8a:a6:dc:01:f5:8f:fa:aa:58:
2e:8b:2c:b9:e1:af:3b:58:fc:e4:4a:0f:65:74:16:e0:66:92:
04:1c:17:6a:22:5d:3b:80:2d:cc:c3:bb:b8:1c:b3:52:cc:76:
71:aa:b5:4a:21:5d:7d:a0:06:cd:64:08:99:e8:6f:12:57:8d:
0b:8f:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:25 2025 by rpki-client