Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: uItxDWhNA4QmXQ+87ahGo2tOYkJUIGtAetmMEgIapVE=
Subject key identifier: 2F:65:06:4B:BC:C0:5D:79:2E:9D:D6:25:95:9C:B0:CB:EC:01:A0:F5
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 01993612D04705E15A683D6327A78B8718EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 00:00:26 +0000
Manifest this update: Thu 11 Sep 2025 00:00:26 +0000
Manifest next update: Fri 12 Sep 2025 00:00:26 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: 0NeiMPrRlPIXLSheggqjsiCR4bJkXCTiCnHIVnuMilo=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:d0:47:05:e1:5a:68:3d:63:27:a7:8b:87:18:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Sep 11 00:00:26 2025 GMT
Not After : Sep 12 00:00:26 2025 GMT
Subject: CN=2f65064bbcc05d792e9dd625959cb0cbec01a0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:01:27:25:42:1e:dc:1c:7a:39:4b:03:e7:
67:f6:99:0a:60:42:e8:b6:51:cc:fe:b8:6e:c5:61:
c9:e7:b0:0f:64:b2:5e:fb:cc:6e:ea:b6:97:f2:5a:
db:1b:23:73:36:a1:3e:b6:07:3b:c9:9d:80:6b:a5:
f2:52:f2:2c:c4:75:8a:dd:e9:48:b2:0e:18:95:b9:
d8:ab:56:26:8e:1d:b8:06:c2:d0:80:41:3a:ef:0c:
71:39:8f:7b:bc:ed:c1:52:b2:7b:53:e6:0d:6c:32:
9f:ae:53:02:75:3a:97:84:1e:cf:4b:1b:fe:27:ea:
c6:21:05:97:39:4a:29:f9:98:7c:d9:f3:57:15:5e:
23:f7:21:44:af:ef:64:5a:79:cb:9c:4a:14:20:ce:
a3:b6:25:9f:84:46:31:32:ee:22:4e:b2:45:3e:fd:
1b:17:2a:70:cb:04:3e:d7:e9:02:c8:4a:c2:c3:de:
82:73:1b:e8:fb:97:9c:50:69:9e:67:e4:6e:94:b0:
a7:18:fb:1d:f7:a0:05:f9:e9:e1:ce:84:01:13:e4:
d8:4f:d2:52:3b:54:77:c4:d0:3b:58:e5:93:0c:75:
6e:c5:c0:0f:52:48:21:8e:ac:f6:3a:d6:4c:d7:30:
14:99:75:e3:bf:80:8e:ee:f0:d9:28:3e:c6:b3:e9:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:06:4B:BC:C0:5D:79:2E:9D:D6:25:95:9C:B0:CB:EC:01:A0:F5
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b2:8a:6c:fa:df:46:fb:13:19:7a:51:7b:1c:31:6c:e7:87:
bb:9b:48:fc:cf:fd:3d:fb:4d:c7:d4:ac:74:f6:32:a9:bf:2a:
92:95:7c:da:c6:f6:1b:f3:b7:2c:e2:ba:96:da:c0:49:23:ed:
88:fc:32:24:b1:fe:b7:66:2e:76:a2:e7:ed:3c:97:26:23:3f:
fb:27:78:a4:13:8d:50:d1:26:9a:ed:45:6b:7b:cd:73:d0:9e:
2c:78:21:45:b7:57:7a:73:82:77:76:97:f0:0c:33:df:48:b6:
a2:b5:cc:61:50:55:bb:da:94:da:17:28:6d:95:64:c2:c9:75:
6a:25:bc:8e:2c:da:ba:6e:0f:e6:74:b9:88:1e:27:e0:fa:60:
a2:c8:31:da:1a:d8:88:d2:40:f5:ee:8a:99:e4:b9:af:11:4a:
5c:aa:eb:55:12:49:14:44:77:b3:5e:74:f4:66:ac:99:ac:d4:
cc:af:b1:5b:4b:3b:0e:13:29:c4:36:df:5b:bf:0c:60:bd:10:
b3:9e:8b:fc:94:01:67:26:91:99:11:84:25:0d:38:c3:91:c4:
c3:91:21:1a:35:17:c6:27:be:84:2f:03:2f:f4:e6:c0:39:fc:
9d:2d:98:cc:bc:ce:d2:8e:22:72:c1:7b:e2:75:56:1d:18:0c:
64:5a:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:28:54 2025 by rpki-client