Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: jfR8WR+NNu4BBBzGEqst436vaCwQu9oRWNqR5glhmXU=
Subject key identifier: C2:0B:A6:F2:42:AC:93:6C:F5:BB:46:F1:23:9D:2B:76:89:E7:7D:51
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 01991E0B046934BE6A08E00378C747CDA42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 04CA
Signing time: Sat 06 Sep 2025 08:01:02 +0000
Manifest this update: Sat 06 Sep 2025 08:01:02 +0000
Manifest next update: Sun 07 Sep 2025 08:01:02 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: g61JDmPEFuQz00rr3+9/3r2IPkSv+z8jXG/wzcFhn/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:0b:04:69:34:be:6a:08:e0:03:78:c7:47:cd:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Sep 6 08:01:02 2025 GMT
Not After : Sep 7 08:01:02 2025 GMT
Subject: CN=c20ba6f242ac936cf5bb46f1239d2b7689e77d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:d4:34:65:de:4e:44:7e:90:51:a2:61:89:
7d:5a:07:0f:23:aa:01:92:82:b6:6c:ce:ed:ef:28:
4b:a4:29:11:a1:ee:fc:c1:00:63:5e:39:10:be:e7:
af:d2:9f:9f:4f:e8:5e:bb:15:d6:f1:d7:3e:09:71:
c9:34:71:03:89:00:49:f5:6f:9c:73:83:e2:6a:a6:
c2:db:f6:ec:8b:0e:b8:7b:a8:9a:be:48:39:fb:54:
1c:d2:0e:c3:7e:af:f6:2d:d2:f2:3d:e5:1e:7f:9b:
5f:34:3d:2e:4e:46:2d:e5:40:36:af:4d:41:73:df:
f3:1e:1a:53:07:b9:1e:74:d4:26:ea:81:62:4b:fd:
12:27:39:75:79:55:f2:d4:09:eb:a8:53:75:dd:4f:
e5:ef:28:d2:b5:b1:f6:3b:34:9b:72:a8:b6:25:6e:
32:6c:6f:9f:da:9c:d8:08:b0:03:af:2b:51:4a:c5:
18:73:54:cc:4c:98:12:da:ed:86:53:21:ba:27:f8:
e9:36:f4:cd:a8:ba:1a:f2:02:1f:84:19:e7:60:9c:
0d:de:c8:39:11:70:ff:5a:4a:21:6f:a5:6d:44:39:
fe:4e:d8:c5:ef:9c:27:9a:25:89:0e:2e:4a:39:33:
b0:31:93:e8:ff:e3:e7:20:5c:85:36:4f:7d:c1:ae:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:A6:F2:42:AC:93:6C:F5:BB:46:F1:23:9D:2B:76:89:E7:7D:51
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a7:49:3b:f1:05:8f:09:1a:a9:68:f4:df:56:9d:d8:c8:63:
b6:7b:b4:91:9a:bd:bb:e5:8b:a7:8b:f9:e4:4c:a1:f0:1a:7c:
b1:ca:b7:88:24:a7:25:57:0e:cb:62:47:3b:1b:49:ac:68:9a:
58:c3:33:6e:12:69:dc:06:d0:ad:a3:10:2d:08:60:a8:f9:00:
ec:3d:d1:cf:aa:0f:94:3d:88:ac:f9:87:8e:f3:f6:67:e1:ae:
35:92:67:64:4b:de:47:ff:d9:c0:25:14:47:b1:00:89:54:0b:
17:3f:97:e2:93:10:82:1d:02:ba:dc:5a:6a:f3:cb:35:83:f6:
af:eb:e2:27:ad:02:03:56:49:31:bf:2a:71:a8:0f:46:e0:50:
65:f3:51:e4:1c:1a:15:04:7b:8c:da:02:14:8d:63:c5:76:57:
00:f6:0c:66:38:9b:e5:76:27:5f:90:e7:01:95:5d:df:8c:2a:
95:6a:c1:a1:17:fd:c0:26:6f:00:d9:bb:74:5d:8b:e3:24:4e:
d1:1c:a0:b1:55:1b:b3:a7:fd:13:df:a1:c2:0b:b1:81:94:ce:
e6:9b:01:3e:80:d4:cf:c4:7b:00:54:7a:50:af:0b:04:f0:ed:
16:0a:38:6e:b6:d4:4f:02:ed:6b:06:63:2c:23:ed:69:d7:eb:
d7:ee:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:39:56 2025 by rpki-client