Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: tGKLqAJvrx1mBcX0fLOO+0A6trCmLy7cwaLtmDPncKQ=
Subject key identifier: CC:C0:01:9B:68:76:18:4D:F4:55:77:89:67:A0:A0:EA:C3:9D:45:61
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019936EF9ABCD975C8D348ADA665ECFA3749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:01:36 +0000
Manifest this update: Thu 11 Sep 2025 04:01:36 +0000
Manifest next update: Fri 12 Sep 2025 04:01:36 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: +bMK3ZQ9jewShrgZaDE/FtN6mmhGwZ+q+qDR1Jl3umc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:9a:bc:d9:75:c8:d3:48:ad:a6:65:ec:fa:37:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Sep 11 04:01:36 2025 GMT
Not After : Sep 12 04:01:36 2025 GMT
Subject: CN=ccc0019b6876184df455778967a0a0eac39d4561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:14:d5:c6:10:22:c4:c3:79:cb:df:be:9f:
b8:1b:92:bd:71:2c:e1:cb:b4:6c:e7:70:1d:e8:6c:
cb:13:ae:5a:ca:0b:02:52:01:53:15:b1:d4:e5:96:
f3:ca:7e:a1:5e:70:9c:47:6c:27:a5:d8:d9:50:6d:
85:04:c7:ed:27:26:79:79:39:21:ab:a9:11:a9:ae:
7d:0b:e7:23:32:fd:be:d6:97:fb:87:f9:75:72:d4:
f3:00:fd:7d:a8:1b:2b:0b:69:d2:2b:43:6e:39:5f:
ef:dd:1f:e7:07:f7:ee:bb:3a:54:18:48:59:5c:ed:
33:be:c1:0b:49:89:f3:12:32:1a:9e:59:09:c1:c2:
e4:9e:92:6b:77:4c:84:15:c4:44:16:81:e4:83:a1:
49:c7:5d:90:80:fa:f5:7e:53:87:1e:ad:08:f9:6f:
6a:61:22:24:01:5b:24:60:46:08:04:3a:e0:c1:96:
67:7e:e3:83:83:7d:68:d0:6a:77:33:11:bd:75:bb:
11:97:e8:38:18:0c:71:54:15:5a:92:79:0b:96:77:
28:3e:53:cf:b8:44:34:52:27:6b:0b:a7:83:ad:5f:
5d:98:af:e9:9d:1b:de:fc:b3:9e:11:54:77:64:5d:
86:ef:bd:a9:96:51:b9:4a:36:e4:1d:45:05:51:2f:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:01:9B:68:76:18:4D:F4:55:77:89:67:A0:A0:EA:C3:9D:45:61
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:7f:73:15:02:6b:0a:37:bb:59:41:9e:10:9a:d2:a7:3f:
9a:0e:a7:09:51:2c:2a:41:7b:79:40:6d:30:4f:e6:59:a1:3e:
02:5d:83:ac:43:35:81:64:e6:e9:18:ad:2c:27:b8:d8:88:01:
cd:86:f6:b9:22:28:94:48:c5:59:f2:bd:12:16:99:8d:7a:6e:
06:62:57:12:f7:cf:7a:a4:0b:b9:92:4d:97:79:e9:a8:67:48:
32:af:97:7e:40:f9:2e:1b:cd:7c:00:fb:a7:6a:79:34:d5:cc:
fa:2e:c0:a7:40:1f:00:92:0e:87:62:39:e9:8c:84:59:e2:9e:
2a:b4:d4:6b:32:20:98:4b:86:f3:0a:ee:af:2d:f7:2f:80:96:
35:ce:c8:fd:ce:94:40:07:23:cf:9f:14:59:86:94:90:f1:6b:
0c:fb:dd:57:09:46:65:71:f9:14:a2:8a:ba:6e:24:4d:43:21:
8f:0c:b6:38:22:c8:ef:35:bf:3c:6b:1b:67:db:13:70:e9:75:
20:47:76:d6:75:8f:79:c6:27:6b:ab:70:95:e3:29:aa:b3:51:
54:35:53:89:ad:b2:41:f1:ce:6b:e5:50:40:e5:9e:84:fb:ef:
d8:e5:f0:65:d2:59:e3:19:c1:f7:72:c3:a2:17:35:d9:1d:02:
36:7b:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:48:32 2025 by rpki-client