
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: za5BULxcQcrpcfkVv7cvZ0RORixPHg0owOtWRIxNXoQ=
Subject key identifier: 03:E0:46:8D:61:13:B6:8C:38:83:F8:E2:10:EA:59:7B:82:7B:95:EB
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 0199342493F55B8757DB6BE79886D0848C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 15:00:36 +0000
Manifest this update: Wed 10 Sep 2025 15:00:36 +0000
Manifest next update: Thu 11 Sep 2025 15:00:36 +0000
Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: xiL8vxwsWbKsx/rsBYpiHB4uudMQdffl17ZquYuzzMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:93:f5:5b:87:57:db:6b:e7:98:86:d0:84:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Sep 10 15:00:36 2025 GMT
Not After : Sep 11 15:00:36 2025 GMT
Subject: CN=03e0468d6113b68c3883f8e210ea597b827b95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:dc:39:1c:1c:d9:bf:9e:10:68:90:a3:1c:
26:6e:6f:82:f4:f6:5b:d7:ce:40:13:af:e1:a8:65:
a5:3e:93:96:f8:2b:fa:3c:eb:bb:8a:ab:3e:87:9a:
ad:a0:fb:7f:4d:b8:e8:38:23:49:e1:87:3b:04:7a:
6e:30:7f:e6:80:11:89:9c:68:fb:98:a1:c8:2d:b6:
c2:43:5f:d6:4f:7d:c9:c6:a9:92:e6:b9:d3:e8:21:
b6:51:40:58:5c:15:d8:81:54:79:dd:ee:6f:cc:0c:
0c:7d:17:b9:b6:7d:39:2e:0f:0c:91:d3:e5:79:af:
5d:60:e7:ad:73:49:dc:eb:75:5d:fc:2b:dd:54:44:
ea:1e:b5:ab:7a:d5:56:d0:7e:c2:d9:5f:fb:2e:6d:
99:09:18:3a:a7:27:9e:f5:20:2d:aa:e4:9b:cd:28:
33:20:2f:ab:77:46:b7:b7:7e:cd:6e:30:db:22:18:
36:38:ee:95:b2:98:7b:ac:65:81:fe:02:09:c7:48:
10:e2:c7:5b:d8:91:fd:55:51:29:7c:78:c2:8c:06:
9c:15:98:1b:89:13:bb:ba:c5:b4:68:d0:94:8f:0e:
cc:47:75:34:d1:80:11:e6:b9:00:17:0b:10:a9:e6:
04:4f:31:56:81:af:23:0d:3f:d5:51:ea:17:bf:4c:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:46:8D:61:13:B6:8C:38:83:F8:E2:10:EA:59:7B:82:7B:95:EB
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:63:45:2d:92:7b:fd:9c:9f:bc:d2:da:3d:f5:ce:99:78:
bf:8b:6f:82:d5:88:24:f7:f8:d1:4e:18:6f:22:08:ae:cc:9a:
c4:f5:a6:d0:15:c6:95:46:0e:16:65:1e:01:e1:e1:8a:41:4f:
1d:1c:c8:f4:45:71:d2:10:1a:35:4e:42:2d:d3:8d:42:0e:a8:
40:ba:d3:f6:d4:df:e7:59:f8:9e:ab:e3:ac:a4:3b:39:fd:87:
25:5f:93:23:13:eb:44:75:25:bd:2a:3f:ff:e1:ce:d9:8f:21:
e3:07:68:1a:ed:ef:0d:be:16:e0:e9:80:81:00:37:3c:19:6e:
51:ae:b4:b6:ae:84:3d:27:e5:a4:64:e1:16:07:d6:cd:cf:8a:
40:c7:4f:ea:df:c7:3f:ca:08:63:06:98:3a:fd:35:af:06:4f:
ea:0b:71:93:1d:85:e4:07:5d:b0:50:be:2a:4a:75:48:fe:dc:
ee:24:83:9c:3d:f5:8c:d0:6c:60:1f:8a:f5:67:6f:77:10:41:
58:0d:46:5e:09:0a:e2:04:08:a6:8d:84:6c:83:ad:a6:41:55:
fc:6a:43:05:c7:5a:76:dd:1e:2d:73:bc:53:12:ef:e9:16:e5:
b5:cf:42:16:47:8e:c1:92:fa:9d:4f:4e:45:94:29:ea:1e:73:
65:58:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:49 2025 by rpki-client