Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: 7XC9UFKvh/XaNG2w118ooBtwsx4y9tfPA+LnOv4hu2U=
Subject key identifier: 42:86:3E:DC:39:B5:B5:AD:52:21:01:A8:3F:D5:06:0C:68:C9:2E:53
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 0199356DF7AD1C0B5DBEFBADE122754ECEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 21:00:23 +0000
Manifest this update: Wed 10 Sep 2025 21:00:23 +0000
Manifest next update: Thu 11 Sep 2025 21:00:23 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: /VITv1EMQfNa0V9NujkhzyC8mKnYAlgOqA9xhXrDcT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6d:f7:ad:1c:0b:5d:be:fb:ad:e1:22:75:4e:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Sep 10 21:00:23 2025 GMT
Not After : Sep 11 21:00:23 2025 GMT
Subject: CN=42863edc39b5b5ad522101a83fd5060c68c92e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:ae:19:5b:58:5f:91:64:fd:ad:e6:39:0e:
01:35:48:dd:7e:df:7f:98:eb:0c:e6:32:9d:ed:20:
7f:5a:2a:75:26:c1:ff:d2:ea:54:aa:0b:37:80:7b:
46:2c:f7:13:f7:8d:59:2f:51:96:8e:0b:1c:a6:ea:
65:36:c6:db:a8:04:fa:1a:c2:fa:ac:43:e1:ad:be:
3b:d7:69:c5:48:eb:ad:4e:60:7d:be:53:c4:40:bb:
3f:bd:2a:7f:a3:ba:36:ab:66:56:d7:89:4a:14:31:
f6:c4:be:41:c0:8c:1a:87:79:3e:65:c7:b1:d7:e7:
cc:46:df:41:f5:17:62:a2:7d:46:a0:0f:33:b7:53:
8a:91:30:65:a9:9a:84:2f:d6:d7:55:fd:7d:cd:ef:
ee:9c:89:be:bc:b8:ec:68:c1:bc:a6:71:42:cc:db:
f7:7b:e7:7d:cf:d8:87:37:d1:be:6c:ec:27:8b:11:
02:e9:1e:f5:d7:05:c6:5d:92:5b:0a:75:93:e4:4e:
9e:b0:6e:16:16:6c:97:97:93:a4:b6:b5:1e:a8:cb:
d5:62:29:60:51:1c:44:c9:5b:38:7d:3b:fd:b3:16:
0f:e9:0d:26:03:58:18:34:91:4f:c4:5f:f4:af:91:
34:79:0d:5e:d1:57:40:0a:48:72:67:e0:d7:dd:05:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:3E:DC:39:B5:B5:AD:52:21:01:A8:3F:D5:06:0C:68:C9:2E:53
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:eb:aa:48:fe:bc:8f:b3:4a:de:af:05:eb:c4:e9:ef:ce:c6:
6d:bb:d5:77:93:e1:eb:b3:7a:4b:df:08:af:de:d3:ae:ee:4f:
3c:39:4d:5a:7b:0a:44:36:58:ac:24:ab:e8:8e:df:1b:b0:83:
a1:75:57:b7:a9:28:de:3f:ee:75:cc:46:9d:3e:a5:28:4d:56:
1f:d8:76:3f:8f:51:4c:3e:83:9d:f8:10:2e:dd:94:88:4d:0e:
9e:5f:ce:6a:2c:66:6f:9a:2b:70:9a:66:30:67:a2:45:a4:4b:
b1:ab:a6:0f:9e:3e:35:3b:2d:5b:ad:42:4a:63:83:43:45:c3:
5b:dd:69:1d:da:21:24:ae:73:c2:b8:b1:a0:39:25:0f:32:a5:
4e:e5:b0:ef:de:63:7c:0c:18:9d:cd:16:5d:e9:17:86:4f:fe:
70:92:e1:5c:22:a7:b9:f7:62:46:e7:1c:73:95:90:14:e1:af:
4f:d0:72:83:1c:3b:8b:4e:eb:d1:ea:62:11:50:cf:ab:f4:0b:
f0:94:ac:bf:5f:c4:78:8b:e2:79:a0:38:18:87:84:48:9e:05:
f0:00:26:9e:a3:8e:c5:c6:29:e9:5f:60:ea:74:0e:50:af:d8:
a6:ae:b4:f5:15:8a:0a:33:35:d2:f6:0c:03:e3:f2:bc:5a:fe:
f8:d7:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:00:28 2025 by rpki-client