Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: wcIcs6+3wqbB0t6aeFu3cvLCk3sCXIP8Ryi/sPyvM9g=
Subject key identifier: A2:03:A8:6A:7D:6F:4E:46:1B:F4:D6:44:07:6C:FD:AC:7A:DB:DB:59
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01993236B2C40D0CEA06F9E7031220C78B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 06:01:09 +0000
Manifest this update: Wed 10 Sep 2025 06:01:09 +0000
Manifest next update: Thu 11 Sep 2025 06:01:09 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: aR9VZcwnxCszGNOeIBKNueT9qgqHbDMQuyYvJ8rEdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:b2:c4:0d:0c:ea:06:f9:e7:03:12:20:c7:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Sep 10 06:01:09 2025 GMT
Not After : Sep 11 06:01:09 2025 GMT
Subject: CN=a203a86a7d6f4e461bf4d644076cfdac7adbdb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:5e:22:a4:34:38:94:4f:64:d6:e9:ae:d7:
ad:2d:53:33:bd:4e:bd:59:49:28:7b:02:ec:e9:fe:
0b:01:28:4c:2f:1b:1d:16:72:31:7f:87:8f:3d:a2:
d3:49:a6:56:b4:bc:c7:74:7b:88:b3:9c:a4:c0:c8:
a2:87:16:3f:23:14:cf:7e:28:7b:99:e9:9f:11:a2:
ba:98:98:8b:52:ec:13:3e:84:6e:e2:64:17:6c:43:
d4:83:76:b6:aa:e1:3d:4b:37:69:b5:43:e0:47:7e:
cf:2e:04:82:fa:3a:03:b3:c6:24:7e:92:82:84:14:
56:0c:e3:e1:ab:7e:24:81:eb:83:2c:e4:5a:a4:e0:
e7:d5:bb:b2:a3:c1:af:f1:c0:19:42:a2:cb:ed:08:
ad:46:bc:0d:58:64:f6:a8:48:71:eb:fb:e3:0e:3d:
a7:26:fd:f7:24:0a:fb:6b:3c:61:2c:cb:a4:de:f0:
16:d6:5d:64:8e:08:96:fc:e7:ab:a0:a4:d6:4b:70:
e8:40:a1:49:01:3c:39:61:b5:86:10:1a:38:26:53:
ba:de:1d:40:6e:0f:6f:49:65:35:6e:93:6b:ec:5d:
85:8e:60:d1:7f:df:41:47:5d:4e:5c:d2:49:a2:3b:
38:3f:ff:a4:67:2a:49:1f:0d:43:e1:40:9f:75:98:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:A8:6A:7D:6F:4E:46:1B:F4:D6:44:07:6C:FD:AC:7A:DB:DB:59
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:55:f0:4f:e7:32:92:e9:84:d3:8c:2f:c2:c2:ad:5a:ed:
10:12:44:3c:fd:6d:bb:e8:09:27:e2:46:11:37:36:e6:68:39:
a0:75:46:1e:41:ec:57:2a:59:16:2f:25:bf:32:24:c3:88:68:
15:37:61:63:bb:2a:ff:55:d2:e9:17:67:dd:ac:c7:dc:6c:ec:
88:68:1d:99:1b:6a:25:27:64:fb:c4:1d:b2:9a:69:7d:0e:7b:
d8:c7:12:02:78:33:58:10:e1:cd:56:3a:52:52:9a:ce:32:69:
7f:c5:99:a2:89:79:27:35:c5:4a:1a:6b:68:55:c5:d4:8b:af:
20:63:b9:0d:c8:ec:a9:69:bd:d3:46:e6:fc:a7:01:5e:12:fe:
81:57:24:ff:80:13:b2:90:bd:fc:69:4e:93:89:06:df:85:a4:
6e:d6:55:34:59:eb:8e:30:5c:55:25:0c:cd:ac:23:00:95:76:
fa:2c:cd:6f:cb:ba:29:b8:52:39:5e:57:75:45:a9:d8:ed:45:
14:a4:3f:d2:20:a7:5f:4f:d5:b8:12:27:f7:d9:99:c4:fe:d2:
fb:23:e1:44:59:d4:eb:38:dd:83:f2:e5:ed:3f:92:cc:85:14:
63:9a:02:b9:92:a5:be:da:7b:9f:5d:6c:26:87:bd:c8:b4:82:
82:67:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:16:44 2025 by rpki-client