Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: LizulE/3Rx8cIPUPqlycCgzm6eIbN8gkBYctj5DNzBU=
Subject key identifier: A8:F9:6B:B4:DA:99:47:EE:33:85:65:0C:B7:B5:C0:D5:4C:14:B2:A4
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 0199221EB7E2837FD4D41B9CF3ED158396C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:02 +0000
Manifest this update: Sun 07 Sep 2025 03:01:02 +0000
Manifest next update: Mon 08 Sep 2025 03:01:02 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: cHXYrvM4y7HE13u0SKv1CTpdzw/RphhLioKKTzUEwFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b7:e2:83:7f:d4:d4:1b:9c:f3:ed:15:83:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Sep 7 03:01:02 2025 GMT
Not After : Sep 8 03:01:02 2025 GMT
Subject: CN=a8f96bb4da9947ee3385650cb7b5c0d54c14b2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:e9:86:08:03:25:32:c2:75:a1:78:b0:ae:
a7:c8:87:0c:5e:cf:95:9a:0d:6c:b9:c9:3e:67:ad:
f6:25:e6:26:db:54:92:2e:7b:80:b8:06:73:ce:92:
e7:e3:5e:03:a2:4c:54:2d:bc:8e:7b:f3:3d:2e:3e:
29:70:01:1b:63:39:ea:4e:1b:4b:ae:ae:5b:ea:c7:
34:fb:a9:7e:cd:1c:11:b0:a9:39:e8:81:73:c3:f2:
99:79:d7:ab:6d:91:35:ff:95:ff:c7:71:07:2a:f8:
1f:bc:4d:0c:32:e0:46:f7:33:53:d3:b2:6a:89:34:
d9:22:78:c5:e3:4c:8a:82:43:8a:93:f2:68:9b:d2:
af:cc:09:c3:5b:d8:89:5e:23:03:c3:84:98:ed:e1:
e3:cc:24:22:89:5c:c3:aa:a9:e9:87:9c:eb:88:bd:
e8:22:8e:5f:ba:9c:a4:ff:4b:6c:0c:94:7b:8f:98:
07:73:e3:04:65:6c:9c:61:fd:c3:e5:4e:6c:1e:15:
b9:e2:63:11:fe:82:9b:4f:b9:dc:97:ed:10:39:1c:
e0:b4:94:a9:7b:df:25:de:d4:f5:1e:ce:96:18:ce:
98:1d:d9:41:89:cd:ef:af:f2:b0:e7:a0:36:84:3b:
45:15:15:41:9d:85:a0:4b:15:37:b3:b3:a4:bd:97:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:6B:B4:DA:99:47:EE:33:85:65:0C:B7:B5:C0:D5:4C:14:B2:A4
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:6d:d0:c2:ed:d5:a6:fe:c6:ed:f1:17:0b:54:5d:a4:d0:
73:c8:59:e7:6f:8a:fe:ac:44:7a:b8:62:a4:50:b1:c0:b0:a0:
a0:ae:38:76:40:07:1d:4e:b5:6c:fe:da:7b:42:9f:60:b3:63:
a8:90:ed:0f:e7:a8:2a:11:2d:d7:ba:82:9b:38:f6:b1:5d:97:
f5:66:98:d2:fc:84:d2:d7:02:ff:1b:ac:57:e2:cd:35:a1:8d:
1f:d6:b9:22:54:ef:a2:2c:ac:0c:86:c1:9e:c4:10:07:83:af:
a0:73:20:b6:e2:5a:44:ea:59:88:41:08:8c:c3:d9:11:98:1e:
9b:57:f9:2a:7f:90:89:e8:95:8a:05:5a:32:ae:3a:a6:39:a5:
83:d0:31:f8:72:33:5c:d5:15:06:1e:02:1a:67:8a:ea:eb:eb:
3c:57:08:8f:9c:40:43:4f:d8:73:2e:e5:cd:ed:9d:71:a7:0a:
86:65:cd:00:bc:9b:78:27:3c:11:cf:cc:67:44:c1:50:fa:c5:
41:de:9a:9d:4b:44:64:5b:c2:0e:53:f3:81:9d:91:68:1e:65:
3e:3f:99:9f:44:e6:2b:03:88:eb:ca:d0:3e:4d:29:e4:2d:c1:
c3:9e:94:3d:f2:38:c7:10:15:14:ea:d6:ca:3b:03:b2:bd:d5:
48:dd:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:45 2025 by rpki-client