Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: NxhXjRHWVnicql7Hs2gHC4jKAs0H/ZrAG1wrqaxOS40=
Subject key identifier: 54:DD:47:86:4E:2A:AE:F0:58:B5:D4:76:3B:D8:3F:DA:36:E7:2D:CA
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 0199FBEB347F8043D6C7D0AF2EF3E1068B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 167F
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 4CEDLi/LAME6tjgnbkdUm3L0u5/40o8OLDJuAC36lBc=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:34:7f:80:43:d6:c7:d0:af:2e:f3:e1:06:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=54dd47864e2aaef058b5d4763bd83fda36e72dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:71:97:2f:57:7a:c2:ae:63:88:73:50:95:
8f:42:6e:95:9a:08:ee:6c:7e:a9:7d:46:4d:53:15:
e0:0c:e7:92:61:28:c3:75:01:11:41:20:71:ba:0e:
21:20:9c:af:f5:7e:57:59:0e:04:00:16:eb:34:e6:
d3:46:fe:1b:a9:51:b8:a2:92:87:14:3f:79:a2:91:
73:90:29:33:1b:88:8a:f8:03:fa:62:01:3d:81:67:
26:6f:3a:6e:97:1b:8f:44:78:2d:7b:11:6e:5d:c2:
31:d0:4e:ff:e0:a1:95:e9:7c:55:38:4f:38:09:56:
09:89:10:b1:c2:40:fa:62:cf:ad:f9:5d:9f:2b:3e:
51:8d:3c:ee:4f:b5:f4:2a:fd:04:51:d8:d4:f8:4b:
d1:8f:89:4d:de:42:2a:5e:bc:4f:a8:01:18:28:84:
3b:da:96:77:e0:fd:b7:32:6b:ef:05:83:37:01:e5:
ce:b4:0f:7f:77:4d:1d:2a:f5:0d:d0:bf:a9:29:89:
14:ce:9f:ee:63:b8:3c:59:0a:f5:ca:2a:26:1a:d2:
1f:52:40:97:50:03:72:e1:fe:61:17:18:f0:62:59:
c5:ad:6e:9a:c2:cc:70:f2:ba:45:07:58:18:e5:5f:
d7:12:9a:55:87:b4:44:b1:d0:68:bf:7e:1b:46:6f:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:47:86:4E:2A:AE:F0:58:B5:D4:76:3B:D8:3F:DA:36:E7:2D:CA
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b7:f9:3a:75:45:70:c2:b4:75:01:06:ba:0d:10:fd:7e:5b:
7f:97:e9:fd:09:4c:46:15:29:29:ea:74:57:cf:dc:37:29:63:
87:ba:44:1c:c6:5a:84:0c:46:8f:61:75:1e:3d:3b:42:c9:a1:
a3:d1:e1:fa:b0:a0:0d:63:1b:02:6e:f0:f8:ca:75:e8:f6:fe:
3d:5b:86:dc:35:9f:ec:3b:be:07:60:fd:eb:89:c8:05:98:75:
59:a4:1c:55:2f:36:20:cb:58:e1:f7:9f:16:70:98:24:a3:eb:
fc:9c:33:05:e8:47:43:8d:77:0d:26:6f:b0:fc:40:31:40:c9:
d0:71:35:3e:5e:87:37:8d:79:64:b3:43:fa:ac:80:d0:72:3e:
bc:b0:a3:0c:85:56:6e:f5:29:30:31:e2:a3:79:b8:82:3c:6c:
e4:b1:8d:3a:00:c8:32:7a:f7:81:8f:f1:71:e4:44:62:43:5d:
62:5f:f0:ac:af:44:e6:1a:7c:86:bd:82:d6:e7:33:62:54:bc:
f1:8f:43:66:fb:70:99:54:01:3e:53:b6:4c:2a:20:18:8c:03:
56:80:72:2c:70:cc:88:a1:88:fc:d8:9a:ae:54:94:a7:86:a2:
3f:e5:59:53:a5:fe:8c:30:9c:fc:17:eb:9f:b5:42:50:6f:90:
a6:48:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:25 2025 by rpki-client