Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: kHRwi6r2InzoqclTqo0W21xlDXAhxh1DGcUBTtXG1AE=
Subject key identifier: 9D:9C:34:DF:98:63:49:BC:67:83:F4:2C:2E:A6:D9:E8:E4:49:7B:5B
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0198D5BBBE046367339E923F8B272362D0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 151C
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: +EaJOMjV5/dpm97Drr1DDqS6ykYtE7SzDI9lQz/2q40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:be:04:63:67:33:9e:92:3f:8b:27:23:62:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=9d9c34df986349bc6783f42c2ea6d9e8e4497b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:c2:35:a7:b8:77:54:f1:5f:8f:65:18:49:
cb:f4:c1:01:f9:55:15:4b:7e:b4:03:30:83:0f:d0:
26:ee:57:55:cd:7f:a1:7e:01:5a:1c:33:d5:df:d1:
53:d0:d1:4b:86:10:67:cc:4f:24:fa:33:dd:ca:d5:
07:d0:a2:59:6d:64:6f:67:cb:7f:7f:35:2d:7f:ba:
1c:5e:0b:48:bb:65:e7:54:c5:6d:e4:af:b2:cd:36:
0a:8e:26:e5:c6:67:82:60:9c:5d:2b:32:bd:ce:79:
99:11:d6:0d:d6:6a:d5:7d:15:6d:0c:10:a5:c4:27:
ff:fd:0f:cc:d2:20:ab:36:b4:bc:7f:e4:62:7e:18:
7f:26:e8:67:34:eb:dd:14:fa:b0:ca:e2:e7:f9:62:
22:1c:2a:2f:d3:ae:b7:f1:c1:2c:f8:e6:bb:bc:68:
00:42:d1:b9:65:51:7f:ab:6d:c0:fe:fc:e0:06:8e:
59:41:b7:78:b1:4c:dd:64:85:4e:fc:db:12:b6:6b:
ad:97:55:2f:96:3a:0b:05:47:df:24:f2:52:d5:f3:
48:21:e4:7d:f4:d8:a7:3f:b5:1f:4e:54:39:a9:f0:
af:5e:82:9e:ab:02:f3:3a:4b:4e:57:e2:d9:c8:4f:
21:64:e5:e2:71:3f:72:80:4f:17:4c:8b:20:62:03:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:34:DF:98:63:49:BC:67:83:F4:2C:2E:A6:D9:E8:E4:49:7B:5B
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7f:cc:e6:67:e0:a8:49:73:76:90:f6:11:ec:18:dd:99:68:
86:d6:90:5a:ff:f5:eb:01:0c:54:c4:ac:13:8a:ca:53:be:43:
29:7c:b3:31:a1:82:ec:70:cc:05:f8:94:e8:3f:26:53:95:49:
19:d9:ee:c1:fc:b2:83:09:4d:ef:0b:0e:00:77:34:23:c9:2b:
fe:02:cf:0f:02:bb:45:d6:e9:7f:9c:a8:72:a4:74:5f:7a:d9:
58:7c:f6:26:04:1b:9b:4a:f9:61:75:a4:a7:bf:61:f9:e1:55:
0f:5b:86:29:56:4e:e2:6a:c1:1d:58:55:25:06:1c:46:da:45:
e6:c5:23:bb:43:8b:07:42:5a:d9:95:a5:3f:19:5a:3a:4b:41:
8c:40:52:3b:88:fd:c7:fc:f8:ea:b0:f5:ca:ec:0c:3f:7c:02:
3d:b0:9b:6a:00:8c:8b:75:04:cd:70:c4:27:c0:15:7f:11:fa:
d1:ea:d7:0a:7d:81:ee:47:0f:1a:0d:b1:66:79:de:f9:8c:19:
71:d7:6e:3d:3f:45:2a:55:50:34:ef:e3:7a:e2:70:ad:9b:1a:
b8:04:94:5a:ac:61:71:02:32:2b:2c:f0:5f:35:3c:75:6d:6e:
1a:1b:89:8f:aa:e4:db:f3:0c:23:c9:5c:59:ca:67:53:54:03:
2d:39:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:10 2025 by rpki-client