Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier: QHgfzxbX0CZA1brkDHSBnXFzcXfXnbgs0V7DW4G07pg=
Subject key identifier: 75:B2:75:65:B5:D6:D5:F5:26:8C:A1:35:38:E2:50:57:65:B1:60:2B
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019938701E8B8DDC395926DF7A48712395A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 11:01:35 +0000
Manifest this update: Thu 11 Sep 2025 11:01:35 +0000
Manifest next update: Fri 12 Sep 2025 11:01:35 +0000
Files and hashes: 1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: nJSkINtjN32BdhO1lcPXWBKNO2J+Jy8YEuKzbpHF+Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:1e:8b:8d:dc:39:59:26:df:7a:48:71:23:95:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Sep 11 11:01:35 2025 GMT
Not After : Sep 12 11:01:35 2025 GMT
Subject: CN=75b27565b5d6d5f5268ca13538e2505765b1602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:dd:cb:82:2a:c7:27:34:2e:73:4a:04:f8:
b5:2d:fd:26:14:97:7c:e9:8f:09:94:3c:52:c5:73:
22:71:fe:af:f5:b5:98:e5:58:6d:7a:d8:0d:0b:38:
07:08:62:0f:5f:6d:4c:69:0c:6d:33:1c:8a:e4:6b:
97:e1:05:92:c4:1d:13:ff:e8:e4:29:2b:00:cf:28:
94:d6:37:ff:bc:13:fa:cf:b5:7e:99:e9:b7:48:ac:
03:20:4f:a5:df:ef:2c:7e:82:f8:c4:2e:3a:6c:0a:
6f:8b:51:78:69:86:38:fa:d3:da:33:f1:1a:60:15:
d1:c6:30:3a:d2:a9:9d:bc:23:fc:aa:59:2d:a4:29:
51:62:75:20:d1:f3:b6:9a:85:53:6a:1a:1e:60:56:
90:74:42:d1:38:24:a4:d7:57:c5:c9:fe:26:ec:95:
c0:de:95:73:b2:89:da:55:3e:1f:fa:0f:5a:70:a4:
fa:f2:c1:39:aa:20:b1:b2:c2:aa:8b:76:c5:22:63:
ff:93:5c:ca:fe:a7:48:ed:68:93:69:34:3e:ba:83:
6c:cb:01:27:49:71:27:a6:32:6e:b3:c5:ce:2c:01:
21:18:70:c9:29:f3:7a:32:e5:62:2b:a8:2a:c2:33:
2d:ff:b5:68:8b:ee:c8:08:47:47:7c:0a:35:64:54:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:75:65:B5:D6:D5:F5:26:8C:A1:35:38:E2:50:57:65:B1:60:2B
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:cf:49:21:67:63:75:84:3a:e8:fd:60:0d:db:de:fc:c5:
49:d1:bd:f9:2e:c1:b7:c5:7a:78:96:2d:df:f3:af:87:f5:bc:
cd:e0:f5:bd:19:0c:8c:ce:26:e6:a8:c4:c7:fc:d1:78:e0:3b:
01:f6:e2:e8:94:82:40:2a:9e:15:2e:a7:aa:fb:dc:4a:29:8f:
aa:86:4f:cf:f3:74:46:e5:9e:fc:c1:5b:e1:3f:d0:93:9e:7e:
b4:39:57:12:99:e3:2e:d7:ba:e9:03:60:f2:42:f5:99:45:07:
7a:b0:60:a1:ff:18:cb:4f:92:f6:bf:5d:f9:56:0a:e7:5d:be:
c5:a8:b5:8b:b4:fa:a4:2b:42:e4:e9:f0:d9:36:ea:41:e1:38:
d7:54:ba:c6:89:d4:96:cd:15:e4:5a:30:7c:55:19:7b:dd:55:
ad:7f:d5:07:54:07:f2:65:2e:79:50:9a:dc:f8:9c:49:10:26:
28:66:e6:3e:5f:1f:da:ca:5e:b3:34:d6:d8:ca:98:c7:cd:d0:
b4:3c:8d:cc:78:40:ac:3d:d4:ce:28:65:30:73:99:d3:49:6b:
ee:61:61:0c:31:7a:5f:06:9a:10:36:b3:e9:1b:9a:74:70:b8:
70:60:68:43:56:a9:ae:da:ed:6d:9b:40:a8:44:c1:b8:8f:ce:
d0:a3:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:33:54 2025 by rpki-client