Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: UEbkFxJLKofpCaa5debSsM/0NFLILqacerzKJIt50Ok=
Subject key identifier: 17:3A:72:CE:95:08:FC:34:1A:8C:6A:BA:1A:EC:51:91:7A:71:0B:0C
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 0199326D2165668503D0EEE4D0E7745D6B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 169B
Signing time: Wed 10 Sep 2025 07:00:36 +0000
Manifest this update: Wed 10 Sep 2025 07:00:36 +0000
Manifest next update: Thu 11 Sep 2025 07:00:36 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: NBI3VRdKbn9puR/aVWkf2maxMGhhhGONzbCirFqSCIw=)
4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:21:65:66:85:03:d0:ee:e4:d0:e7:74:5d:6b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Sep 10 07:00:36 2025 GMT
Not After : Sep 11 07:00:36 2025 GMT
Subject: CN=173a72ce9508fc341a8c6aba1aec51917a710b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:25:9a:24:80:91:fa:b1:a1:af:cd:51:e1:
c6:fb:7d:3d:7b:e8:bb:54:5e:17:ad:8b:2c:f6:9b:
e0:bb:c8:d6:3f:16:46:d0:b5:14:25:88:f9:c7:ff:
a2:2c:53:49:36:8e:37:e3:c3:74:4f:71:a2:9f:f0:
06:02:2b:69:f2:9b:83:b1:35:bf:14:4d:be:5b:27:
d3:82:ff:16:26:7f:de:fe:53:02:13:a2:b8:b1:f4:
1b:83:0a:c5:b6:45:5f:5a:f0:7f:87:ab:bf:11:9c:
80:7b:ef:79:ff:e0:22:2b:56:cd:2d:ab:1b:d3:fc:
47:59:f6:cb:76:c7:1d:12:9d:3e:ef:97:41:4a:d9:
a7:e6:1b:e7:d0:9e:bb:c1:24:2e:0a:f3:f0:3c:da:
9e:f8:db:a7:89:60:fe:40:b8:ca:8e:94:5a:ba:db:
69:df:f8:ed:bb:79:98:a7:ac:bb:91:7f:59:1f:96:
43:a0:12:4f:95:5f:8b:84:a0:f1:de:b9:cc:c7:ad:
55:d3:f8:81:96:5f:df:48:22:86:f7:ed:37:33:bb:
ee:6b:3d:8b:06:99:0d:e4:03:2c:94:b7:45:4c:20:
8c:5c:4a:ca:5c:9b:58:e6:76:e6:3e:4c:5d:49:84:
ed:62:20:1e:db:ac:50:63:05:2e:94:12:dd:5d:08:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:72:CE:95:08:FC:34:1A:8C:6A:BA:1A:EC:51:91:7A:71:0B:0C
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:ee:f0:79:b4:92:9a:03:1d:9c:2c:5d:00:7e:48:7e:96:
28:a4:c5:4c:62:36:e1:fd:65:1b:10:10:6a:c8:1d:54:1f:42:
a4:80:d9:5c:7d:39:fe:8f:62:d9:12:a1:b0:88:e8:69:f3:a4:
9d:9f:b8:00:0d:8f:9a:3e:a8:5e:23:de:ed:f6:8d:fb:71:b6:
be:80:3f:88:07:34:bf:ba:48:20:db:33:c9:d2:85:e3:d2:31:
3a:79:53:85:d6:5e:74:a7:83:1f:f1:0d:e8:d7:5b:c1:6b:09:
e5:75:af:b2:6c:15:79:84:ee:db:58:b5:6a:d5:35:26:8d:8b:
8a:ad:58:9a:cf:36:a4:4e:b8:d0:14:f2:51:6d:9e:ec:94:b9:
7c:c3:98:58:dc:68:86:e0:d3:37:e0:15:51:72:e7:ab:fd:9a:
30:20:c1:b3:8b:86:45:08:76:7b:e1:b8:06:55:34:b1:fc:b0:
f8:32:ef:71:f1:4d:4c:93:89:e0:e0:a0:e2:42:11:74:c3:79:
58:be:35:b0:e0:96:2d:44:2d:4e:f5:06:8a:54:67:6a:3c:32:
26:fd:04:12:17:f1:f4:29:32:b6:92:be:d5:4d:52:97:b3:3b:
6a:66:d1:8f:07:39:93:10:12:0d:06:90:c5:bf:32:cb:20:c3:
d6:8e:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:25:34 2025 by rpki-client