Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: 8tORK9vlSCGOod8RMthOmuq+1Xev+TAnjQg7/Pe3kjs=
Subject key identifier: EA:6F:12:82:69:4B:3C:78:10:85:E7:BE:B2:38:99:F9:3C:55:89:B8
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 01992D46BF896C4F069EBE5505B89BF698A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 07:00:35 +0000
Manifest this update: Tue 09 Sep 2025 07:00:35 +0000
Manifest next update: Wed 10 Sep 2025 07:00:35 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: Esgp77ukvaKnfpEMSYEN3QipKhaDZjkJZeO+QlUcGxM=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:bf:89:6c:4f:06:9e:be:55:05:b8:9b:f6:98:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Sep 9 07:00:35 2025 GMT
Not After : Sep 10 07:00:35 2025 GMT
Subject: CN=ea6f1282694b3c781085e7beb23899f93c5589b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:35:16:0d:63:89:d4:61:5f:bc:b6:07:6e:
4d:ea:49:96:fc:0e:a4:6c:08:2e:3f:bb:d3:ec:02:
d3:77:e8:f4:69:a4:68:14:64:af:4d:a2:74:0d:6f:
3b:88:d0:89:75:6e:1d:10:b5:e6:e8:81:a1:8f:f8:
7d:6f:29:6c:56:00:07:31:48:dd:bf:e2:05:cc:50:
17:3f:9f:53:cb:d4:ee:ca:a1:9c:39:09:a8:70:39:
15:72:cf:c5:96:d5:fa:2b:36:e7:fe:74:ad:e2:6e:
18:e4:d6:d1:83:19:e2:b0:20:44:f7:9d:65:b3:10:
7b:71:8d:de:80:fd:f0:0d:28:16:7f:8b:4b:a8:7e:
88:b2:34:ab:cc:62:ff:d3:b1:20:b3:ff:8a:bc:43:
c6:ef:79:c1:71:73:f2:d4:c1:46:52:ee:a3:bc:f7:
db:2c:fc:41:7a:de:2f:1a:40:12:3d:0e:41:e5:00:
94:2f:b9:7a:12:22:72:12:34:a4:f2:fa:9a:23:23:
60:5a:df:b6:7f:f4:03:78:55:94:31:06:75:59:41:
34:7d:96:c1:e9:c7:41:84:cc:47:d0:a3:ca:5d:61:
78:a8:c9:ee:45:76:54:98:8a:04:b4:8f:fd:e1:b6:
57:cc:19:72:d2:e3:64:34:a7:6a:0c:4b:ff:00:49:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:12:82:69:4B:3C:78:10:85:E7:BE:B2:38:99:F9:3C:55:89:B8
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c1:08:2e:8d:1b:45:3d:a7:6f:0a:4e:ed:1f:eb:de:30:8c:
8f:04:dd:48:e5:55:f7:a5:4d:0f:4e:78:d8:d1:e9:4e:3b:9b:
9f:e8:31:27:2d:93:9c:ba:d4:9c:db:3d:fe:92:b0:5e:f8:fd:
0f:c6:df:3b:56:4f:f5:ba:0f:7c:1e:f9:86:a7:81:ba:a2:45:
2b:35:68:73:74:0b:7a:7b:25:a8:ab:31:60:22:19:5e:e2:5c:
f0:96:cc:bf:49:61:84:b1:15:78:7b:14:04:df:f8:15:0b:f2:
c8:22:6e:0c:2c:0e:f1:06:c0:c3:3c:1f:20:85:61:fb:5d:23:
89:05:d1:ac:96:6a:fe:9b:48:00:19:7b:d6:67:f8:67:88:18:
1f:25:fc:4e:2e:87:15:77:7b:75:9e:1d:a1:3b:b3:e4:ba:7d:
aa:67:e1:a6:af:0f:b4:a7:bc:6e:97:53:df:3c:95:35:0f:12:
96:81:60:b6:75:67:a1:36:78:39:1e:ab:ad:90:fc:62:9a:62:
3f:92:21:1a:7a:b6:8d:4b:16:d2:3c:22:99:a1:15:8c:9b:12:
6c:29:64:4b:96:bb:d6:db:ac:47:b3:01:5c:78:b4:36:e3:79:
a0:c7:c1:7b:25:9e:dd:c4:2d:a6:83:77:b0:e9:a7:fe:13:e8:
5e:75:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:15:45 2025 by rpki-client