Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: kr+dzA9qsbJTghnpvTcl2SkfEbA7hkT1XOZyo2Nc9s0=
Subject key identifier: 7D:B9:83:78:C6:AF:A5:B5:01:FF:D2:B0:0C:4B:27:1A:93:AA:B4:9E
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01993312ED01065B255D37CC46FC5757539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 15C1
Signing time: Wed 10 Sep 2025 10:01:42 +0000
Manifest this update: Wed 10 Sep 2025 10:01:42 +0000
Manifest next update: Thu 11 Sep 2025 10:01:42 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: CcQKvqNGYQllVOWReUUUaFUUy9jkSWM8VX/2lNl5GFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:ed:01:06:5b:25:5d:37:cc:46:fc:57:57:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Sep 10 10:01:42 2025 GMT
Not After : Sep 11 10:01:42 2025 GMT
Subject: CN=7db98378c6afa5b501ffd2b00c4b271a93aab49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:58:98:cd:b8:7e:b6:b9:ea:82:87:b1:10:
08:9c:29:14:eb:37:af:5d:36:4d:15:03:40:07:65:
81:96:f5:40:6d:6b:33:bc:9d:1f:57:fa:6f:88:20:
2f:83:a4:96:a1:f1:4a:29:cb:1e:0f:d5:ed:a4:82:
a9:25:24:58:49:e9:a8:eb:95:a7:e1:00:90:ea:8f:
e9:85:5d:7e:91:6e:11:fe:55:04:b0:cb:61:8d:e4:
6e:ca:b7:f0:04:55:b1:3e:92:53:22:2f:77:dc:b1:
28:9f:96:39:74:b2:c0:e4:4c:38:a6:ee:89:f6:f8:
6e:66:10:25:76:4c:72:c8:95:ce:47:28:0d:98:93:
e9:09:a7:56:22:1b:90:b8:5a:20:ee:f3:40:04:a0:
be:d0:07:11:e4:0a:c9:81:13:47:bb:46:a0:d2:0d:
07:7f:78:52:a4:62:20:33:c5:0d:af:44:ca:b7:02:
74:ee:ff:98:19:57:dc:f6:79:af:da:86:cd:ed:cd:
dc:77:8c:46:38:ee:af:04:13:3a:c2:fc:01:9c:49:
e5:b4:f3:a8:25:24:62:10:05:4b:4e:0e:af:2a:ef:
0b:c2:03:ec:c4:0c:f3:0d:7e:aa:4f:a6:90:28:50:
99:40:88:77:69:55:81:b4:8a:54:46:fa:58:eb:19:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B9:83:78:C6:AF:A5:B5:01:FF:D2:B0:0C:4B:27:1A:93:AA:B4:9E
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c8:72:a6:f6:4e:83:f3:e6:3f:ff:50:19:16:f9:39:3e:94:
e9:b1:0c:c5:61:26:09:70:12:fe:af:8b:dd:10:25:ba:35:e5:
da:aa:be:80:3d:17:c4:24:64:b3:3c:2e:14:37:3f:e8:07:20:
c6:71:47:e9:c9:1b:9d:8e:5d:00:67:55:e7:b3:20:20:20:8d:
3a:ec:d8:a4:e7:53:01:50:8b:a8:73:16:68:8b:90:69:74:d9:
e3:bd:5b:14:1d:f2:eb:71:c5:fe:13:e0:0c:09:49:41:57:9c:
95:5f:b9:16:6b:59:3c:4b:a3:17:84:d5:00:92:9c:ec:9e:e6:
bd:77:8f:0a:22:e8:c3:b8:5a:c1:d1:65:80:23:b7:92:af:b2:
7c:45:c9:4b:78:07:dd:0d:14:a9:3d:ba:ff:05:55:dd:1f:89:
14:94:00:ff:49:53:19:b0:9f:8f:d1:67:b5:b5:3e:a0:02:61:
1c:04:bd:80:fc:74:8c:aa:2b:b6:5e:19:f3:d5:ed:5b:1a:63:
3d:9b:5d:0b:4e:3d:2d:84:89:00:ba:2a:5b:24:9a:30:86:aa:
46:42:b4:4c:53:b3:17:e7:27:14:1c:7c:89:ba:6b:1a:5a:2c:
24:67:04:3c:02:24:7e:b7:c3:cf:38:13:2e:d9:6d:76:cf:83:
33:bc:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:55:22 2025 by rpki-client