
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: OagQ2axkVQuXMpcqXomLBjpoK9MsSHBRoVmfvWXzNC8=
Subject key identifier: B5:05:91:97:09:1D:0B:97:91:6C:D3:11:85:C5:BF:12:D2:BA:8D:A8
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 0199183F6D2ECA0C65ADF7E0E6D8C87DDFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 05:00:33 +0000
Manifest this update: Fri 05 Sep 2025 05:00:33 +0000
Manifest next update: Sat 06 Sep 2025 05:00:33 +0000
Files and hashes: 1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: GET+NMkzzSz+dEuuBzqvhwi369eLUfnzsZ0MWjR/xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:6d:2e:ca:0c:65:ad:f7:e0:e6:d8:c8:7d:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Sep 5 05:00:33 2025 GMT
Not After : Sep 6 05:00:33 2025 GMT
Subject: CN=b5059197091d0b97916cd31185c5bf12d2ba8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0f:c8:91:f5:a7:e5:20:29:d8:89:1e:19:62:
65:ac:b1:70:4b:cc:d8:fe:c3:ea:50:c7:92:a3:5e:
a2:a9:f2:af:1b:d7:55:1b:b2:18:26:00:5c:1c:f0:
bf:35:46:f6:c6:13:71:b1:1a:2c:93:2b:64:90:b9:
ff:b5:6f:88:ab:3c:d9:f7:c7:75:89:07:43:75:20:
a6:49:a1:1d:cc:16:9d:37:d3:e7:5d:e2:27:a7:97:
a3:c0:7b:e8:b1:cd:c8:fe:f0:0f:b4:55:02:b4:7e:
0e:a0:54:d7:eb:cd:db:1c:76:14:0d:fb:84:08:ac:
2d:cb:b6:06:4f:02:62:be:45:0f:d1:1f:67:8b:37:
a5:05:80:b0:7c:9b:f3:89:ed:77:2f:ba:6c:fa:0f:
7e:21:74:bc:e2:ff:d1:22:fb:46:0b:3c:06:a8:cb:
20:0b:f1:eb:c6:71:25:29:bc:8b:51:14:20:1c:95:
0d:61:10:c8:84:31:72:9a:7b:ab:1b:b8:b2:b7:07:
c6:00:e6:11:8d:1f:02:42:84:68:fa:db:61:5f:c0:
b7:ef:75:3e:21:21:75:e4:86:ec:92:52:cb:76:dd:
53:0b:12:a9:b1:a8:66:b1:b3:e9:99:4c:b7:44:f7:
46:8f:27:2a:30:2e:83:6f:60:39:0f:57:fe:bc:7c:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:91:97:09:1D:0B:97:91:6C:D3:11:85:C5:BF:12:D2:BA:8D:A8
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d4:ca:0d:32:a3:88:ce:16:aa:b1:c6:4f:b8:8b:20:dc:9e:
78:29:03:72:4a:a1:65:2f:cf:ce:ba:90:55:73:9c:a8:24:19:
b7:4d:7c:c2:c4:4e:81:ec:10:95:db:38:5f:aa:29:f2:d1:11:
66:b7:de:f5:02:59:e5:aa:fa:33:5c:9a:91:4d:92:a5:ac:34:
2f:f6:af:93:27:52:3d:3a:2d:a8:40:83:13:6e:7b:34:96:d6:
b2:99:8e:68:6a:89:cd:4b:46:6b:35:65:88:92:91:08:bf:2c:
3c:6f:43:96:df:29:13:75:38:42:bb:60:5b:1f:1b:12:87:96:
63:4c:45:41:7e:0e:ba:83:6e:1f:89:d9:c1:83:81:3d:b5:e1:
27:e1:b1:74:94:21:23:d5:29:26:c8:00:1c:06:ba:ef:5d:e5:
45:e2:01:0d:f1:1c:9c:cf:c8:1f:30:ed:35:b7:05:da:33:aa:
77:9c:38:b2:cb:73:25:33:9e:d4:35:15:6c:0f:12:26:9a:c0:
47:7b:74:a8:12:97:8c:21:62:8e:f1:c5:82:66:92:be:e4:09:
f9:21:5c:ae:39:b3:5f:d4:bd:57:19:b6:c5:d7:81:ad:b2:d1:
2e:9b:c6:80:b1:a3:71:44:b8:a9:23:cc:12:18:70:91:cd:86:
ed:d3:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:28 2025 by rpki-client