Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: UXSzHi0AYrXnXTPPt9Ach+GK42EqHUC2XgTvrjqWjDo=
Subject key identifier: A8:28:2D:AE:70:75:99:48:6F:BD:DB:97:F9:2E:2B:AF:E9:19:48:E3
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0199349244BE75633409C4E8B99891B1E63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 17:00:25 +0000
Manifest this update: Wed 10 Sep 2025 17:00:25 +0000
Manifest next update: Thu 11 Sep 2025 17:00:25 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: vhAXXCFJIAadvSUVNT4cKq5WjtxQk0hp7qy+/i7dziA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:44:be:75:63:34:09:c4:e8:b9:98:91:b1:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Sep 10 17:00:25 2025 GMT
Not After : Sep 11 17:00:25 2025 GMT
Subject: CN=a8282dae707599486fbddb97f92e2bafe91948e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:1e:02:52:d9:9a:7e:85:59:40:99:4e:d9:
b8:3a:c8:41:05:d4:89:5a:ca:7c:49:e2:00:10:f3:
8c:74:5e:20:d4:dd:43:ba:21:33:d0:16:f4:42:91:
6d:f2:62:d9:88:f0:12:77:0e:a4:ad:a8:9b:c3:58:
48:1f:c7:df:19:a4:0c:fc:97:8b:02:44:0a:89:f3:
28:dd:86:a5:56:84:27:77:2d:cb:99:a7:f7:2c:a1:
9c:e2:f5:d1:a9:f5:3d:df:bb:d7:a5:38:06:34:2b:
75:9c:5b:1f:96:5f:61:be:fe:d8:51:4a:2b:64:68:
98:f8:8d:7f:b9:4f:4f:3f:fb:a3:83:8a:ce:59:3d:
9b:aa:7c:6c:2e:50:bc:0d:f0:e1:14:3c:dd:a2:34:
fa:3e:fd:68:f7:a4:b6:2f:bd:c5:ea:4f:ca:87:16:
ed:c2:96:52:67:b1:a7:54:3d:e4:60:7b:f5:cb:c0:
af:dd:41:92:88:e7:82:23:d4:bd:88:0c:2e:ec:a1:
b5:c6:b2:94:8c:95:69:7b:9c:5a:bc:de:ef:cf:7d:
f8:76:e3:47:de:ee:10:f5:ce:f8:57:b2:8a:08:e0:
54:62:ef:bc:c8:58:7f:d6:ac:49:57:e9:ee:7a:09:
c7:ee:6c:d0:5c:28:e4:b0:46:6f:b2:39:9e:95:19:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:28:2D:AE:70:75:99:48:6F:BD:DB:97:F9:2E:2B:AF:E9:19:48:E3
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:44:fc:25:50:c6:3c:f2:42:82:c1:85:1c:01:4a:db:1f:42:
18:58:32:a5:9f:e7:0e:75:70:60:31:df:83:ca:86:4d:01:ac:
ae:d4:df:48:80:74:db:d6:4d:ca:6d:4a:9d:65:b7:d1:04:cf:
ae:77:07:25:e1:b6:a4:7b:c5:ac:24:37:52:1b:24:77:b9:6d:
98:a4:fe:7a:20:6d:f9:34:a3:08:5f:6c:29:da:bd:18:c7:ee:
43:66:a5:03:ca:35:25:f8:65:00:03:07:c3:9c:0c:19:3a:6c:
e2:e5:ee:8f:95:16:fc:6d:eb:69:5d:2d:71:76:6c:ff:ca:b1:
5b:18:cc:ac:94:3d:6b:04:13:e0:e4:1e:23:de:15:2c:de:60:
20:24:65:13:9f:34:c9:f6:c0:fa:05:e4:cc:56:4f:6d:66:79:
d8:df:17:b7:c7:f5:3f:9f:c4:93:1e:c7:ba:52:38:b0:8b:96:
d2:21:b0:14:9e:4d:46:16:ff:b4:c1:0d:f1:41:00:9d:0d:39:
2c:b8:6d:0f:51:62:cc:b6:45:55:80:75:54:c4:76:33:09:9a:
6f:86:01:c6:64:db:0c:d0:61:e8:1a:5d:6c:20:29:11:9c:9e:
b8:24:cd:6f:20:99:34:40:b0:68:21:8d:be:9c:5b:d8:20:01:
ae:d9:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:47:54 2025 by rpki-client