Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: pC4qL/ze5RpSIv99W8uFx3gObZkuPHTq80LSVFWB604=
Subject key identifier: 43:24:0C:A9:26:3E:C6:8E:F2:00:71:EF:78:6E:E0:E9:67:7C:62:73
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 0198D65F0A0DBF8635A01E275F5E3836E7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0D19
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: 76QFDmF/kDcT4qmoo2zN4muD8jxib/0NO+vV1VeaseA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:0d:bf:86:35:a0:1e:27:5f:5e:38:36:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=43240ca9263ec68ef20071ef786ee0e9677c6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:62:7c:70:1d:f9:fb:95:e7:7e:cb:05:c7:
61:51:42:7b:25:7d:23:99:3e:3a:32:ca:68:40:d4:
5f:9f:79:b2:d2:9b:20:e3:a2:58:94:2c:20:34:35:
58:25:07:8f:69:8b:ad:c3:39:05:55:08:8f:7f:0f:
73:54:c1:47:a7:fb:7e:b0:4a:2b:ca:a6:54:ff:26:
2b:26:95:69:03:1b:25:91:87:3e:ad:4d:cf:0b:ce:
be:3b:7b:41:fd:03:ac:0f:1f:f6:8f:d5:59:93:17:
da:7c:fd:ad:59:ec:46:06:dc:0e:ed:27:3a:66:42:
6a:72:69:39:46:b1:60:77:bb:bf:19:ec:99:9f:95:
23:45:99:77:d2:0f:ad:6e:73:b1:98:4e:64:9c:4c:
ff:c5:76:9b:3a:8a:54:8e:ce:7b:fc:cd:90:f8:83:
68:c1:6f:48:8e:89:21:03:a2:6e:a5:98:d9:3c:4c:
e3:99:23:08:b0:5f:be:c3:7a:c5:59:19:39:ee:e9:
eb:d8:07:25:db:3d:cb:0a:93:d7:01:d3:26:8c:80:
73:1e:27:0e:29:c7:45:15:62:80:29:df:cc:24:8c:
c6:6d:8d:45:60:a8:25:75:62:0f:4e:e7:d4:c4:29:
c2:c0:f3:f7:16:fd:52:68:a4:0e:44:f3:56:a2:c5:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:0C:A9:26:3E:C6:8E:F2:00:71:EF:78:6E:E0:E9:67:7C:62:73
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:81:58:a1:8b:8b:e1:a1:46:4e:f9:97:6c:63:3e:a7:18:09:
b6:2f:ff:35:1f:40:93:80:99:15:b8:54:72:bb:dd:ff:45:84:
36:2f:1a:e5:ce:fa:70:34:59:d1:a5:d9:36:34:6c:3a:60:f9:
40:82:d1:cc:f9:0d:f3:c6:10:73:2d:4c:64:6f:4d:42:c0:2f:
68:22:c9:4c:47:ea:9b:6d:69:7e:13:5d:68:d1:2c:e7:a8:d0:
06:a6:ec:bd:f0:0c:8f:6c:e3:70:6b:93:66:05:24:b0:b1:6c:
e1:54:e3:43:4f:fe:02:74:3a:97:8c:9f:69:3c:f6:11:f4:53:
18:e0:4d:eb:de:2f:5e:10:92:62:50:e2:5f:56:f5:84:b1:8f:
6f:d8:be:8e:0d:65:31:54:23:0a:5f:37:7a:20:7a:ee:5b:d8:
41:d9:61:e7:d2:0b:d4:db:b4:81:6c:73:02:67:6e:fa:34:34:
cf:77:f5:24:7e:27:12:58:1c:6d:3a:08:33:59:31:16:64:44:
04:71:a1:af:e2:68:34:e2:b2:3f:17:71:5c:b5:75:08:9d:a6:
b6:19:54:50:5e:e1:35:ad:0a:a4:6d:6b:b0:51:19:db:b5:d6:
2a:96:0a:5f:4f:18:cc:e2:08:fc:c2:4f:ac:f1:a7:71:03:56:
ea:a8:aa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:01 2025 by rpki-client