Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File: rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier: F74YRLp3pI4pl4pGT9+m9UDRTrfKKirekLD6Om/WnHA=
Subject key identifier: 39:5C:DB:11:BA:68:DD:E7:F6:A1:E9:11:AD:10:22:60:FB:06:14:57
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 0199345BCA6FA0DB3057B62E740380ACD90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 16:00:54 +0000
Manifest this update: Wed 10 Sep 2025 16:00:54 +0000
Manifest next update: Thu 11 Sep 2025 16:00:54 +0000
Files and hashes: 1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=)
2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=)
3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=)
4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=)
5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: +QCR7SxTF2eriokfUz4d7XR/ktyRZvR9vkkSKcFbsY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:ca:6f:a0:db:30:57:b6:2e:74:03:80:ac:d9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Sep 10 16:00:54 2025 GMT
Not After : Sep 11 16:00:54 2025 GMT
Subject: CN=395cdb11ba68dde7f6a1e911ad102260fb061457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:4a:93:60:bd:48:3c:6d:9b:fa:b9:9b:7a:
68:60:88:eb:0c:0e:2d:fb:74:a7:cc:df:eb:72:72:
d8:69:e1:b7:9a:95:ce:08:e4:f8:55:17:86:11:d7:
8a:34:d2:d7:af:4a:f0:d3:b7:40:42:af:0b:14:64:
9b:af:92:88:96:82:c7:a3:e4:8e:64:90:27:d4:63:
35:a9:0e:db:d7:cc:9f:f3:48:71:1e:9c:6b:13:df:
c9:f4:c0:0a:75:b2:e8:69:ab:59:cc:91:6f:9c:28:
41:1e:25:2b:5f:99:b9:c1:3c:6b:ab:7e:d6:44:6a:
b5:2f:08:6d:17:21:ff:b7:11:e9:67:75:15:9d:3c:
65:54:13:40:de:02:ca:2a:2f:9b:a3:f7:79:75:c1:
26:7d:8e:50:f4:24:c2:93:0c:6b:b3:57:0a:68:c3:
16:ae:b2:a5:67:04:1f:c6:2f:47:9c:37:bf:c9:9a:
83:3e:f3:09:b7:66:b3:fa:b3:ce:44:96:d7:16:3d:
9d:0b:41:11:48:de:05:fb:4e:e0:d0:3e:f3:42:4d:
5a:3f:2a:eb:c0:89:9e:b7:f1:3c:63:2b:59:ac:5c:
93:9c:50:92:0a:7b:e5:56:c3:0b:6b:44:fd:b4:a8:
ee:a9:7d:85:2b:dc:93:3a:6b:6c:8c:77:ea:60:38:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:DB:11:BA:68:DD:E7:F6:A1:E9:11:AD:10:22:60:FB:06:14:57
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d0:cd:6b:71:f7:77:cc:d6:8a:cd:95:db:98:19:80:e6:37:
fb:83:09:b0:d8:a2:17:1a:2d:b7:58:14:96:11:1c:08:0e:f2:
06:68:73:cc:89:12:88:a6:99:97:b6:00:cb:36:8a:c8:57:ec:
c0:93:c7:23:35:7c:54:5f:2c:41:b4:21:52:f3:bf:67:fc:4b:
b2:b5:2c:06:00:6c:9c:95:6e:89:2f:38:26:91:c8:a0:59:2a:
11:37:a4:e8:b6:22:c4:09:b4:4d:bf:a4:71:bb:8c:a8:4d:3f:
41:39:44:df:3a:8a:0b:1f:b4:fb:42:d4:96:db:ad:22:60:66:
1c:0c:9e:14:8b:fb:df:9b:4c:4b:ff:89:ba:e1:a6:f3:a7:8d:
57:46:0f:e0:90:36:32:3b:5d:94:4d:a8:bf:99:d3:79:c7:8b:
ea:4f:0b:94:f6:d9:85:f5:af:fc:1b:10:86:28:cb:e0:4e:87:
32:cc:53:66:61:3c:ea:5d:cf:eb:a9:1b:44:f8:36:a9:a9:81:
db:42:32:61:b6:b5:5f:39:c2:95:48:c3:61:f1:57:af:e7:81:
3f:2f:0c:6f:24:81:15:64:9f:54:29:b7:69:a4:3a:ae:d6:b1:
3f:c3:28:d5:41:95:64:42:ac:04:41:78:a8:8b:b6:a4:af:91:
a7:3b:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:42:41 2025 by rpki-client