Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: QSEBr5L9i1YR6f33B+AZ9783ql+UVHIg3eE5ggJDdlc=
Subject key identifier: AF:FE:40:CF:D3:D4:3B:72:DB:CF:A9:57:ED:DF:25:D8:43:ED:D4:4F
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0199364A7C21E9F2A029311A5C9F1829FD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 01:01:15 +0000
Manifest this update: Thu 11 Sep 2025 01:01:15 +0000
Manifest next update: Fri 12 Sep 2025 01:01:15 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: objd/uOWWVKV6uZSNu7/fV3s5qH3y0TCz+QVivc0ltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:7c:21:e9:f2:a0:29:31:1a:5c:9f:18:29:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Sep 11 01:01:15 2025 GMT
Not After : Sep 12 01:01:15 2025 GMT
Subject: CN=affe40cfd3d43b72dbcfa957eddf25d843edd44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:47:af:f4:a7:4b:ff:65:c6:07:5c:60:cb:
3a:62:5a:5b:52:94:8d:89:08:d9:c6:54:76:6c:5b:
7e:f9:d4:93:c7:0f:11:05:8f:cc:3c:b2:99:d5:06:
e6:fe:dd:65:2c:74:23:4b:89:7e:be:fe:63:ec:7e:
f0:7e:69:4c:17:33:6e:67:92:ed:62:3b:df:79:fb:
40:cd:85:7a:70:4e:b3:33:35:d0:05:69:4b:21:01:
72:94:dd:db:5b:8b:27:2f:31:f5:67:51:7a:1e:fc:
1a:68:f3:9c:97:6f:3b:8e:13:1a:73:dd:36:59:e8:
c6:24:a0:bd:9d:1e:34:3f:f1:6b:0c:c6:cb:c2:2f:
5e:f2:40:bb:f9:cf:9e:8f:32:38:c8:1d:96:27:08:
35:75:b4:f7:67:30:44:4c:c2:3d:fc:8f:ed:17:5c:
26:1a:4e:be:d5:89:8b:9c:2e:43:e1:29:a3:98:70:
1a:81:87:c7:87:04:6f:8e:b4:65:71:e0:ae:8c:47:
6d:76:2b:30:58:da:5b:00:3e:f4:d3:dd:51:66:93:
a5:e1:a4:94:2f:11:93:aa:d6:cd:d8:44:6b:be:22:
08:f7:91:20:eb:15:1f:be:84:fb:50:a7:71:d0:fa:
65:b2:e4:05:ee:b7:e1:ec:c8:b1:f6:2e:54:6c:42:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:40:CF:D3:D4:3B:72:DB:CF:A9:57:ED:DF:25:D8:43:ED:D4:4F
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:53:02:de:e0:85:4e:11:11:a7:aa:aa:b4:e1:0f:09:1b:bc:
b3:2f:5d:bf:a6:59:a9:e6:fc:c2:07:70:21:c7:f7:9b:6f:96:
f7:9c:91:de:98:66:82:e1:4f:b3:06:bf:03:fd:ce:e1:20:29:
39:ae:6b:69:19:5c:af:4b:d4:c2:90:f8:7f:dd:29:fd:ab:17:
97:85:f8:7e:84:0a:eb:11:39:2a:35:63:1d:ef:41:18:78:2b:
c7:6b:5e:07:34:be:44:74:a3:71:08:bd:fc:3c:85:a6:74:ed:
1a:08:e2:41:2c:f0:27:fc:53:bc:ad:9f:68:9e:f4:74:ff:b7:
62:12:fb:ed:13:27:bc:0f:44:93:3a:32:85:6b:b5:f3:b1:50:
b8:28:3c:7e:22:50:cb:bf:7e:d7:22:da:45:e6:34:04:19:d9:
83:da:60:77:0e:26:8d:64:41:61:86:5a:64:b0:9d:9b:e5:a3:
35:ef:51:a2:54:2f:58:fa:90:f8:4c:fd:5c:2c:30:a0:0b:b5:
56:6d:ac:cd:72:29:d4:dc:0c:89:ad:54:a9:8e:e6:98:f9:71:
7b:25:db:70:c2:c0:84:e6:e5:8c:04:1d:48:c3:e2:6e:12:49:
31:18:3c:71:03:18:91:16:e1:cb:6f:a5:45:09:0c:37:4f:69:
6c:ba:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:56:39 2025 by rpki-client