
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: R8wQie8F5Ww0bOandsZjxdD9hSGekOw+eTGaBRBqovM=
Subject key identifier: 26:75:B3:44:F0:24:77:88:BE:8A:1C:84:9B:F5:32:2E:8F:A9:E0:9A
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0197B88F9178DD059840E4EB991D55C5871C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0836
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: t0hU9mqfeY4izdilsn86qnEllRtlVFeyVQXxYzQBQXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:91:78:dd:05:98:40:e4:eb:99:1d:55:c5:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=2675b344f0247788be8a1c849bf5322e8fa9e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:46:dc:51:76:d2:4f:b1:71:c6:d2:b7:51:
3f:58:fe:66:4e:15:ad:59:7a:20:e1:72:c5:a0:3b:
53:f7:c0:47:da:ab:a9:8e:69:f7:43:33:2e:ff:7b:
a5:2b:56:0a:4f:d2:7d:b4:23:c6:24:4d:15:99:aa:
54:21:9d:a8:69:c5:b1:27:fb:c5:a1:82:b4:7d:db:
60:f7:c1:dc:16:ff:f2:cd:98:53:c6:dd:18:e8:81:
38:1d:26:34:0a:79:3b:bd:c6:63:82:70:da:b6:19:
9e:f3:83:65:83:57:cf:36:18:e3:2a:f8:22:33:0d:
a9:df:49:d7:d6:f5:a5:e7:e4:07:34:04:61:38:07:
90:01:e9:bc:f9:ab:91:bb:0a:74:4a:a3:91:ec:41:
88:2c:33:d6:76:2d:76:93:a4:eb:eb:65:ed:0a:72:
3a:9e:ee:fa:4c:93:9e:cb:5e:11:c0:cd:46:eb:ac:
9d:74:0a:6b:8c:22:35:2c:e1:75:07:b4:d3:ca:7b:
48:3d:33:12:a9:5f:a5:9a:60:31:42:90:b7:21:30:
0b:64:13:eb:b7:db:05:f0:1d:09:39:d8:0f:3b:72:
a5:8d:29:ff:24:0b:6c:0f:7c:1a:a1:80:dc:b9:81:
37:c5:6a:35:ba:02:2b:30:fe:f5:dd:eb:2d:cd:21:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:B3:44:F0:24:77:88:BE:8A:1C:84:9B:F5:32:2E:8F:A9:E0:9A
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:14:0d:21:88:85:9d:a1:0e:77:4d:5d:7e:89:6f:18:9b:13:
d6:91:c5:91:2b:12:6d:0a:55:74:20:23:7d:a6:e7:88:b7:10:
43:19:31:ee:d3:e7:dd:90:76:79:a8:43:fb:76:10:46:b2:7d:
ff:76:ea:b8:3e:24:51:d0:00:9e:85:45:fc:78:4d:a2:30:3e:
cf:59:06:68:70:60:de:e8:65:63:eb:dc:08:91:c8:88:42:cc:
7a:25:49:1b:b9:8d:af:70:97:7c:6a:f1:17:d7:ae:65:35:20:
29:89:26:b2:77:ed:d7:aa:7f:ef:30:23:ba:c5:c5:72:b6:1f:
08:f2:a1:d5:28:39:bf:a7:7b:a5:d3:fb:db:76:1d:af:48:e5:
4d:8b:7b:e8:df:57:aa:53:ba:7b:c8:dc:c9:54:c8:a0:58:09:
a8:e8:73:e9:85:4e:aa:cf:e0:e5:2c:d8:f3:e7:a1:fc:f5:ea:
9d:f4:5c:dd:58:75:12:3e:1d:fb:f7:10:8b:8c:3c:21:a5:0b:
b5:32:fc:e1:94:42:3a:47:2e:16:17:a4:90:e0:4d:77:7c:8f:
15:0f:0b:0b:f2:6f:5d:51:2e:26:70:53:79:91:00:ae:3d:f7:
2d:b7:20:6b:52:92:01:22:7d:f6:bd:93:d1:a8:e3:ef:e1:7e:
b0:10:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:26 2025 by rpki-client