Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File: wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier: pEhWJLVhe8X0D6PdorebVOO3HFVoMLc2KUZ/VynWp1A=
Subject key identifier: F1:1F:F8:A7:F9:59:19:54:88:75:AF:B2:4C:8E:AD:C0:4C:77:37:1F
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 01992CD95710E154F9AA94FE105FF3EE8DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 05:01:05 +0000
Manifest this update: Tue 09 Sep 2025 05:01:05 +0000
Manifest next update: Wed 10 Sep 2025 05:01:05 +0000
Files and hashes: 1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: gpDzuhCzyu23KsBZ6fOAsKe0kzTWmR4nIowgvCIM2TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:57:10:e1:54:f9:aa:94:fe:10:5f:f3:ee:8d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Sep 9 05:01:05 2025 GMT
Not After : Sep 10 05:01:05 2025 GMT
Subject: CN=f11ff8a7f95919548875afb24c8eadc04c77371f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:3a:82:7d:8c:d6:24:8e:96:52:0f:31:93:
94:0c:1f:f5:ff:c3:d7:31:d1:63:d8:3a:02:06:e6:
f3:59:57:e4:9b:3d:4b:28:ef:25:91:f0:a1:2f:4c:
36:8f:36:8a:e6:92:f9:17:56:c8:93:ae:79:c5:ee:
73:92:e3:b0:e9:f2:97:17:01:f1:66:f7:4a:45:c2:
6c:48:c9:50:af:26:72:72:be:89:4a:16:48:b8:60:
4d:a5:0d:5e:1b:f1:b9:0e:2e:7f:1f:7f:5a:9c:b7:
39:d8:ac:29:11:41:95:5c:19:89:3f:7d:cf:4e:13:
48:ca:33:fe:aa:a2:0f:1d:e4:4b:0c:aa:47:c3:d5:
95:3c:63:01:fc:77:f8:7c:f7:7c:32:a3:81:21:5c:
6e:25:19:21:f6:4b:c0:19:33:28:6b:62:86:6c:a3:
fe:99:4e:66:9d:f4:28:1e:c6:66:bd:b3:f0:ac:f3:
b5:64:b8:b3:57:b1:59:26:b2:a1:81:9f:fe:9c:54:
27:f5:77:74:1b:d5:9a:09:f2:51:8f:00:58:9c:cf:
26:9b:35:84:b2:8c:88:b8:7e:f5:38:dc:38:6d:ef:
ca:e1:1d:b4:4d:74:2e:f5:e7:62:50:7f:f3:f1:c9:
f8:d4:42:d3:4c:24:c5:10:7b:90:fa:58:f0:cc:a9:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:F8:A7:F9:59:19:54:88:75:AF:B2:4C:8E:AD:C0:4C:77:37:1F
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:99:cc:3a:f5:7d:de:05:b0:36:42:ce:42:75:62:d8:b1:0f:
01:4d:f6:91:d1:6d:8f:a4:4c:b6:d7:f3:20:ff:54:d7:e5:77:
19:95:a5:81:02:13:cb:08:84:5e:0a:d8:c1:45:87:74:e2:13:
e7:f4:31:45:fe:ca:57:ea:dd:2e:fb:6a:d9:f1:2e:8c:47:df:
4e:86:ea:c4:43:46:95:83:df:b5:62:d6:ee:8a:70:ec:a7:6b:
c1:04:96:ad:59:37:6d:61:2e:c8:fd:c9:c3:5b:a2:ff:da:9a:
9e:16:15:c5:7c:b7:0a:95:c4:1e:5c:f3:42:c0:8d:b5:d0:21:
34:33:9c:43:83:9d:5b:91:1b:37:a7:0f:4d:60:35:39:61:47:
a3:99:b8:8b:af:4e:c4:c8:2c:72:d8:e2:3d:02:0c:c1:42:31:
34:e0:05:1d:e6:d3:d0:55:7a:41:71:63:4c:4b:53:11:aa:c3:
7d:30:6d:82:52:1b:6f:11:29:53:c4:f9:b8:35:63:d6:8a:db:
92:15:0f:f6:12:6f:9c:be:eb:a0:42:aa:de:e6:0a:17:dc:c5:
e9:47:fb:2e:19:c0:d7:bd:14:3f:7e:1b:aa:4a:78:3a:ab:41:
d9:50:32:d9:6c:9e:11:3b:84:32:93:0d:b2:a3:51:fc:7c:ec:
fd:3e:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:48:10 2025 by rpki-client