Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: RzqdQiHS3GekXNdm/XC/2wfrxvuUP1zFANuho0BIR3c=
Subject key identifier: 32:40:32:6B:A3:58:61:74:04:60:16:FE:A1:7F:A9:80:65:A1:81:AB
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 0198D6981453E97BCEAB6ED3BE5ABD869338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0A99
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: FJgCEbPtQ5+D74rTQ3zrda1o9h6YrPl8qYsH7aCpVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:14:53:e9:7b:ce:ab:6e:d3:be:5a:bd:86:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=3240326ba3586174046016fea17fa98065a181ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:d8:28:99:b5:29:e4:fe:b2:1e:77:9d:7a:
0f:6d:ca:c7:ee:61:70:a7:18:81:89:bd:0e:89:c9:
53:d0:3d:09:cc:43:78:a3:69:b9:2a:bb:5a:dd:8f:
c5:80:8a:80:95:91:8d:0c:2a:6a:3d:85:d0:73:71:
4b:e9:0c:a9:d5:bb:c8:01:33:81:ac:e7:04:aa:17:
b5:2c:f3:5a:af:b6:08:0b:5e:e9:8d:fe:ad:31:44:
08:47:48:59:5d:91:f1:cf:f0:09:9a:ef:85:ae:0e:
3d:62:ba:c3:01:ec:5c:7e:d4:ab:2b:e1:27:99:d7:
e9:76:5e:88:ce:bc:ab:06:b2:1b:58:9e:dc:00:03:
dd:8c:e7:1f:87:80:1f:93:70:c5:f8:a3:3d:06:fa:
5b:78:cb:35:62:57:5b:0d:57:1c:da:86:57:b6:43:
cd:65:89:9d:ca:66:e4:8b:84:43:3b:08:d6:ac:db:
0f:e7:96:83:d7:73:05:c9:2b:df:d6:e8:9f:66:17:
1a:df:b0:24:c8:a6:f9:ca:f1:21:3f:b8:62:d4:42:
54:82:45:58:62:c4:9b:6a:92:95:be:a5:4e:a8:49:
60:fc:3c:c9:89:5d:6c:55:c1:1f:06:f2:79:23:34:
9d:a7:55:c0:8d:78:72:f6:41:b2:2a:26:8c:01:d1:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:32:6B:A3:58:61:74:04:60:16:FE:A1:7F:A9:80:65:A1:81:AB
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:28:2c:17:40:2c:c6:b0:be:77:74:5b:97:51:fb:9d:b2:57:
6b:8b:cf:ed:5d:e3:27:90:ba:0f:d5:fd:00:91:e6:df:9c:6c:
2a:0d:1e:37:37:37:55:80:50:80:d3:50:da:9a:40:3a:b1:5f:
ca:57:c6:35:f1:94:ba:7e:d0:48:6f:d8:47:c8:ae:be:5c:62:
c3:ae:21:49:3d:7b:f3:57:7d:b0:6e:ad:1a:ad:fa:66:a6:26:
84:50:df:f0:12:34:2f:9a:a0:b0:77:6d:6d:46:b1:40:0e:3d:
32:17:b7:f6:6a:df:c2:4d:0a:f3:d4:71:8e:eb:51:a7:e0:9d:
20:97:f7:6b:8b:9e:e1:86:0a:a4:3c:0c:da:b5:7c:ba:47:24:
cb:79:30:be:40:7b:c2:94:fe:45:da:69:77:13:4d:0e:3f:60:
d8:4e:50:63:c2:e0:67:6d:20:95:26:c9:d8:4a:10:67:07:69:
e6:2b:b9:0d:24:e0:59:aa:3d:9c:50:5e:dc:93:a3:6a:6f:23:
2e:72:d2:cf:c0:2d:20:e0:e8:72:77:80:9d:27:4f:1c:19:2a:
22:89:81:ad:cf:b3:d9:1b:5c:6e:db:34:b8:ef:27:0d:b4:a7:
23:b2:db:f1:ac:78:ba:bb:53:4a:f9:b0:0d:0a:c6:88:a5:97:
eb:ef:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:35 2025 by rpki-client