Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: SqgEU2W6+Pzc7DhykhwK95kvlpklZD3thzRMryNeLS4=
Subject key identifier: 94:86:5E:01:4D:E7:E5:30:FA:1E:47:35:8F:92:52:0F:92:94:E4:31
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 0198D4A847E0A6A6986A8657BECF5AD8B469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 04A4
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: yqQeqtwVcaqHOIyhHqSqfjdE+P3uuOah66YgqCxcvxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:e0:a6:a6:98:6a:86:57:be:cf:5a:d8:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=94865e014de7e530fa1e47358f92520f9294e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:08:f1:0b:b9:16:15:78:9b:dc:53:46:b2:19:
54:60:cc:3a:41:7f:04:51:b4:18:21:70:3f:0f:5b:
34:e4:c8:b2:87:7a:f8:46:9b:8b:a1:a0:d7:34:f7:
96:41:d7:9f:bc:6d:6c:7d:1e:ad:a7:79:ec:33:85:
85:4a:00:4d:57:3c:e2:d5:d6:c1:cb:ad:8b:a5:90:
a3:0f:bb:78:a9:b7:db:d0:c2:79:cd:5f:0e:c4:e5:
85:7d:c8:7e:d4:af:8c:a8:97:f4:42:98:05:de:ce:
f8:06:1e:95:d8:a8:6d:87:b8:e5:6d:82:72:af:a8:
dd:f8:f6:c8:48:c7:ae:21:56:c9:d0:13:15:9f:d7:
ad:ec:04:86:64:fc:64:65:84:72:c4:69:77:65:76:
ff:ad:1d:d3:46:70:ec:63:67:90:9e:72:98:31:1d:
e6:cc:a8:e1:1b:64:2f:98:e4:b4:0d:10:2e:03:21:
54:ee:ba:cf:34:c4:9e:51:5f:f0:d8:61:ba:0c:b2:
d3:c2:ff:53:4c:12:78:d2:07:4c:31:f9:c2:1b:bb:
e6:61:44:1a:a5:68:00:ff:59:10:19:49:98:bb:a4:
3c:21:38:fa:de:d2:79:a4:08:09:d5:e6:ed:09:3d:
56:97:34:5f:b6:3e:15:fe:39:b3:26:90:51:13:a1:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:5E:01:4D:E7:E5:30:FA:1E:47:35:8F:92:52:0F:92:94:E4:31
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:f9:cb:dc:29:f4:42:ad:f8:78:bf:00:da:f6:ab:b6:7e:
50:d2:0a:70:82:c7:20:a2:f7:6f:6c:16:14:47:7a:25:9b:4d:
60:21:d3:74:c6:6c:d9:e4:5b:9f:af:d0:3c:e9:5c:f0:e2:f6:
ff:2f:3a:1b:66:e8:5e:a7:26:75:25:fc:cc:73:dd:df:a1:c0:
0b:bd:8e:e3:ec:b9:8f:b2:ac:0f:0d:7e:f1:95:25:bb:cf:f8:
64:0e:c9:ad:44:d6:bc:f2:c5:b8:e4:e3:31:43:78:79:21:63:
7d:31:74:8d:82:af:96:df:08:96:8d:25:17:04:ce:9b:24:6c:
63:cf:9c:06:80:45:1c:63:00:99:76:b6:a8:1a:39:57:9a:6b:
ba:29:ac:9b:d9:8d:bd:bd:72:1c:77:df:dc:9a:be:39:3f:00:
5e:b5:9e:32:92:fe:fa:22:81:56:31:ed:78:d9:55:fb:5a:c5:
e0:4b:8e:71:7f:d6:2b:5b:01:8b:32:98:a3:c3:23:fc:99:d0:
6d:ba:9a:b2:a9:d9:95:b6:ba:f0:29:b1:4e:b4:c6:7c:05:2e:
39:b9:c7:b6:04:4f:83:07:f8:7b:49:2e:9d:df:1c:cb:e5:83:
df:1b:de:47:ea:ae:46:ad:00:42:d1:04:4e:f5:05:e8:07:6e:
3c:93:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:05 2025 by rpki-client