Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: KVPdGSJSibLX3zH8HFpCfrwFx3TOjVH0UrLdFTPO9lo=
Subject key identifier: 09:F3:B2:CA:27:49:43:4C:63:54:A9:4A:38:22:0E:2A:1C:27:AC:14
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 019923A03F5B990D36686B1DC328B6DECD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:08 +0000
Manifest this update: Sun 07 Sep 2025 10:02:08 +0000
Manifest next update: Mon 08 Sep 2025 10:02:08 +0000
Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: rMsZBJJysLjdTqwuMV3aIsi1jnLix87b80QvG/I7sg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:3f:5b:99:0d:36:68:6b:1d:c3:28:b6:de:cd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Sep 7 10:02:08 2025 GMT
Not After : Sep 8 10:02:08 2025 GMT
Subject: CN=09f3b2ca2749434c6354a94a38220e2a1c27ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:76:ce:98:41:90:8a:ce:ab:87:10:a9:9f:
dc:32:86:dc:31:d6:f5:fd:cf:ff:a9:21:3d:93:81:
da:5f:e0:a9:8d:4a:a6:bd:a7:20:e6:3b:d0:ba:df:
d9:da:13:b5:d8:25:55:d3:e2:44:da:ca:ae:e5:be:
d5:22:2d:84:ca:cd:73:70:45:85:83:54:cd:e9:d4:
36:86:23:f6:d0:e5:20:58:c7:e0:a4:ae:7e:b4:63:
d5:fa:0f:72:4a:3a:57:4a:0d:01:dd:61:b4:40:f4:
e7:a1:55:a4:03:ad:e5:82:67:45:39:d5:e9:97:ff:
66:24:92:d0:54:52:8b:91:0e:5d:38:4c:ac:4d:8e:
29:e2:85:64:12:77:1f:ee:ff:91:77:30:6a:3f:c8:
3b:ed:63:61:cb:23:8b:97:55:f2:a0:4f:e7:ff:28:
9d:95:49:60:07:7e:9f:3f:57:9a:93:7f:98:16:7f:
c1:98:df:e6:4c:cd:59:52:fc:62:b6:aa:3b:54:0f:
58:34:f8:42:ac:5f:e8:34:7c:84:3d:e7:12:08:61:
6d:5b:91:84:30:54:42:49:68:a8:fd:82:00:1f:c6:
fc:19:f5:ae:5d:8e:d1:5b:bb:63:ae:19:20:c9:b3:
75:56:55:b4:d6:22:c1:47:d4:e3:a5:68:fa:4d:99:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:B2:CA:27:49:43:4C:63:54:A9:4A:38:22:0E:2A:1C:27:AC:14
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:77:6a:b0:68:7d:eb:93:b6:39:4a:e5:28:3b:3a:f6:f8:
23:60:0a:fb:d2:f6:a1:dc:b0:66:a8:5a:96:63:13:93:be:27:
56:95:96:1e:c2:50:b1:ea:10:9c:9b:7b:e5:9a:76:87:33:2d:
5d:b0:65:81:ee:60:ec:94:e2:ac:42:4e:8a:ba:5f:38:52:b5:
8a:a7:71:84:d7:b3:fa:e8:51:eb:6c:c8:a6:85:ee:49:8f:99:
51:f2:db:3c:66:fd:26:ec:53:c0:e4:29:cd:e6:3f:75:2a:0c:
7d:ba:55:42:1d:57:11:34:ad:31:86:d4:55:f4:ed:71:36:fd:
a5:9f:6d:73:0e:48:67:fe:25:1e:33:95:34:f6:4a:f4:9d:2e:
80:00:be:53:ad:92:b3:40:77:49:3f:94:b3:f0:8b:38:09:a0:
ef:a1:9a:fb:52:ca:86:34:97:be:4b:88:f5:f2:62:3f:ab:78:
f6:5e:90:7a:07:cb:98:48:1e:98:dc:15:f8:66:b1:cb:90:0f:
17:dc:d1:3d:aa:28:9b:0e:9c:b6:18:09:43:17:f5:eb:a9:8a:
69:b9:3f:a3:de:38:e2:7f:b3:be:13:1f:ea:00:d8:2c:c4:2e:
a1:09:bd:f8:d2:bd:da:e3:73:3f:da:c3:1b:44:09:a5:4e:91:
5e:94:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:45 2025 by rpki-client