Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: bt5PN1kwdhTTiLZzJOctnPXw1NdMYsaw3k2+AMZLBi4=
Subject key identifier: AA:D0:79:D1:44:66:F5:39:AA:59:7B:6D:A7:57:F2:EC:36:52:4B:E3
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 0198D4A7B69F6BAF82591565F792FEECE8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: kMOQVXPLuAcRF+kfojtofvt1jIgfx5jcsi2o2L3cTS0=)
2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b6:9f:6b:af:82:59:15:65:f7:92:fe:ec:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=aad079d14466f539aa597b6da757f2ec36524be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:5f:97:eb:29:f5:24:76:09:71:ac:02:34:
a0:ce:c7:05:77:1c:50:9a:c5:47:7e:0e:c8:00:0d:
33:fe:29:61:ff:b7:53:69:7e:2a:ec:88:65:6c:29:
ea:7e:37:68:34:df:c7:d9:11:40:ab:c8:e1:b9:49:
3b:2a:fe:ea:ac:a8:ee:57:14:13:c8:6c:ea:fb:7b:
28:b9:f5:a6:db:23:90:8b:55:79:b4:2d:74:e4:8c:
b2:1d:3d:eb:cb:51:89:bc:d7:35:9f:f1:a1:50:07:
b3:48:cf:aa:f2:58:1c:07:41:9e:23:a8:3e:d8:7d:
d2:87:7c:b1:5e:b3:e4:22:15:13:6d:49:6d:ca:cf:
ad:62:51:61:34:d7:90:7e:aa:39:9e:35:d4:c8:02:
4b:89:47:fb:81:d1:65:37:88:d1:74:ed:af:c0:b8:
99:3b:7f:c7:60:44:c0:1a:d7:28:aa:59:26:49:d1:
f9:b6:cb:6d:6a:b9:88:5f:c4:d1:81:b5:ac:ed:0a:
f2:cb:25:63:90:d1:a6:58:65:9c:a1:9b:14:ab:9c:
ff:f4:22:c0:58:27:99:27:5d:08:1f:56:73:27:fa:
f2:98:56:7c:7b:4d:9b:3e:d7:3d:82:2b:25:ab:7c:
fa:8d:1a:2e:0c:b5:ed:69:07:c5:6c:3b:af:cd:ca:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:79:D1:44:66:F5:39:AA:59:7B:6D:A7:57:F2:EC:36:52:4B:E3
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:26:67:93:9c:aa:08:76:ff:f3:8d:b9:7d:4d:c7:1f:68:
61:bf:e5:6d:ce:56:88:bd:d4:30:3c:c1:cc:75:6e:55:84:ac:
f8:58:57:1f:39:e1:ba:70:dd:68:4e:70:72:1a:78:1a:13:91:
c6:9d:12:ef:3e:ec:a2:73:40:86:d3:ca:62:e3:69:b1:1a:27:
82:96:d0:41:9a:a4:b6:bc:80:73:6b:2c:32:e3:03:e6:da:6b:
43:db:3e:2e:0d:ae:df:4c:64:a6:07:ee:d3:1c:82:e4:d8:79:
a2:ac:9a:c2:c8:a7:49:82:ce:8d:24:77:6f:c1:61:73:30:45:
fd:00:65:65:cf:13:a3:e2:da:96:6b:dd:90:a8:06:fd:9c:d5:
9a:7f:e9:00:cc:ed:cf:9a:28:71:e5:a7:67:8a:ef:cd:f0:7e:
0e:f7:af:9a:04:6a:bf:e8:d9:40:7f:71:0f:bc:d0:73:11:76:
c5:fc:d2:24:2f:f3:87:53:70:fd:e5:03:99:f3:ab:08:c0:9d:
67:06:fc:27:3a:2c:0e:9a:d5:2f:91:f8:20:62:b6:fa:dc:c2:
8b:24:be:90:84:c1:bf:90:66:1d:53:58:c9:00:04:01:7d:d4:
fe:96:c5:dc:a7:7f:40:ce:8b:45:42:2c:0d:78:02:43:ae:ac:
43:c0:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:01 2025 by rpki-client