Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: yc6PjERPY5CuvgvXJtGsFrwJfvGXekwH3Z0d2TNMA+s=
Subject key identifier: 93:01:29:8A:F1:84:41:29:11:55:33:3B:D6:2A:AB:BF:BA:74:88:2A
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019846D1E05B033E53AAD89834A9C1CB9045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 040D
Signing time: Sat 26 Jul 2025 13:00:16 +0000
Manifest this update: Sat 26 Jul 2025 13:00:16 +0000
Manifest next update: Sun 27 Jul 2025 13:00:16 +0000
Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=)
2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=)
3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=)
4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: Y3ZP1xxYUBGKiZXKfGHRYg+0GeDLZSGp/a7mcox85T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:e0:5b:03:3e:53:aa:d8:98:34:a9:c1:cb:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jul 26 13:00:16 2025 GMT
Not After : Jul 27 13:00:16 2025 GMT
Subject: CN=9301298af18441291155333bd62aabbfba74882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:a0:f0:e9:8d:60:56:4c:cb:3e:35:f5:8f:
27:a6:cc:ed:f4:5c:d1:26:dd:d1:db:72:bb:33:10:
47:fa:bc:47:83:6f:c8:fb:25:f5:64:32:75:26:94:
1b:fe:bd:26:2a:5a:a1:bf:b4:29:5a:af:66:67:58:
33:5c:d5:66:fa:34:90:ad:fa:39:9c:eb:94:ca:f3:
8d:13:fe:4c:36:b8:ea:25:d6:af:6f:c9:ea:9c:65:
82:01:0e:fa:1c:89:22:ef:bb:2d:e5:46:47:6a:f8:
4f:2f:ec:cf:74:0d:1d:d3:36:aa:6a:27:26:fd:00:
8e:fa:6f:1c:72:19:48:d9:4e:ca:e9:8f:db:8a:ad:
bc:46:16:ac:29:d1:36:c5:ed:4f:63:83:75:a6:82:
02:c7:82:30:b7:bd:4b:60:65:f2:ce:11:1e:d8:ae:
5f:02:c5:7b:85:39:ea:42:05:3b:9f:d6:f7:4f:c0:
37:ef:9b:0a:39:d2:64:e4:f1:dd:e8:08:82:12:ee:
00:9a:51:79:a4:d5:f9:bf:7d:26:f0:80:17:e6:a8:
a2:44:76:92:93:e8:eb:b4:83:5d:f6:84:dc:e7:4e:
3f:23:0d:1a:c2:88:90:41:3b:81:ee:a4:dc:8d:ac:
56:10:00:90:b0:06:a6:65:72:ef:37:82:4d:7c:e7:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:29:8A:F1:84:41:29:11:55:33:3B:D6:2A:AB:BF:BA:74:88:2A
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:71:4e:d7:b6:88:71:96:04:14:83:6e:d5:d6:b0:f5:02:
d6:b2:34:bb:61:ed:48:d4:66:c0:17:27:14:91:f4:f6:e5:b0:
f5:f5:20:b8:74:7c:df:77:2f:d3:79:04:9e:45:be:3a:45:eb:
63:33:08:5d:b4:fe:f5:46:3f:15:0b:28:15:da:3c:77:ff:d8:
ad:9d:23:12:d3:86:6a:19:d9:cb:d7:47:8e:09:22:2c:89:a5:
77:c8:dc:a8:5d:09:f4:4d:87:66:9f:38:b3:f3:af:84:00:c3:
b9:3a:cc:3c:df:b9:94:24:f7:00:d4:3e:3b:2e:98:a5:e9:0a:
e2:31:db:f1:d6:48:5a:e1:ad:9e:fd:67:42:80:be:f3:90:bd:
26:b7:79:df:2c:c7:83:9f:8a:19:ce:ea:76:3e:b5:64:43:f9:
3c:5b:46:d2:36:64:91:b3:b7:ed:17:fa:af:e6:e1:c7:32:c7:
a2:b2:7a:40:a1:bd:7b:5a:08:f7:8b:7e:76:83:04:d9:48:3c:
ed:01:af:af:97:26:9e:36:0f:6c:b4:24:1c:29:df:b1:bd:aa:
e1:90:27:a2:fd:86:3a:f7:04:56:bb:fa:30:4d:cc:21:a6:7a:
43:c7:c8:9e:80:11:9b:bb:cb:24:a1:05:b3:40:8d:ce:96:54:
a1:c2:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:15 2025 by rpki-client