Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: f8hbSV5Nlc5Hs9odMXK18BPbzhDfDw3dSkzDQEFFIwI=
Subject key identifier: 6C:D2:E4:A0:31:24:06:43:AC:C7:90:D2:13:89:8E:79:CE:A6:96:3F
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019922FA108D5BC97DCC14065A856E2AF70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: t1H5ZwyQbWBpMIOcbBNZLFXTNFJFkhB7eUbyBGYXcMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:10:8d:5b:c9:7d:cc:14:06:5a:85:6e:2a:f7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=6cd2e4a031240643acc790d213898e79cea6963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:23:7d:b5:fa:3f:5b:c4:0f:a1:64:e3:20:
4c:5d:46:0d:af:d5:9f:49:4b:11:4b:e1:9a:b2:d6:
5a:4b:bf:7b:80:bd:88:50:b4:b8:f2:a6:74:03:67:
7f:73:4b:ff:a7:c8:fb:4c:bc:e5:4e:2e:f4:1d:ae:
ee:fe:99:98:cc:d3:2e:bd:fb:14:14:da:ae:98:0b:
06:7e:8c:e1:1b:59:16:20:4f:8e:05:4a:93:8d:ae:
03:ef:ee:a3:b9:bb:24:07:91:9e:5a:e3:ce:f7:f7:
b5:58:3c:49:1d:fd:1c:4e:25:29:c3:54:5b:08:66:
2f:e5:be:84:fb:07:ed:e8:bc:13:fa:bf:a5:df:14:
47:2b:ef:d8:1f:4b:9f:b6:c8:ff:6c:34:37:f2:8c:
09:7d:46:51:66:fa:70:2e:33:bd:b7:cf:f9:83:d8:
45:05:77:d0:91:38:cd:b9:35:c7:fc:db:3a:2b:26:
e9:42:c4:03:31:be:e0:7f:f8:9d:5b:7b:2c:42:a6:
fb:48:28:b0:61:29:3f:d7:df:4c:97:a0:65:6d:a3:
35:a4:a9:9a:36:01:f3:4f:8d:56:12:01:e9:49:aa:
3d:19:41:bb:58:ba:90:87:8a:f8:00:27:7e:26:b7:
c2:f3:40:f4:ee:eb:61:08:01:dc:82:03:d4:2f:5f:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:E4:A0:31:24:06:43:AC:C7:90:D2:13:89:8E:79:CE:A6:96:3F
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:77:47:e3:a8:7b:88:ce:49:e3:98:ff:46:6f:56:b1:6e:
b0:b9:1e:e0:51:0f:20:1e:86:68:89:04:84:3d:0c:9c:75:6e:
b0:5a:d2:d8:52:6d:0e:1c:fb:ae:f1:80:52:a0:50:b6:f8:bf:
b6:7a:62:a1:af:75:9a:d7:93:ef:50:21:8d:05:c3:dc:ea:fa:
b0:e5:2f:65:82:89:e2:e2:65:5c:c3:63:a6:16:6e:fc:58:22:
68:16:e0:a8:e7:09:38:30:15:0a:21:4e:48:4b:53:b2:de:28:
e1:75:bb:18:ce:f8:ad:12:a3:fb:04:e4:6b:5f:18:09:63:90:
bb:16:c4:11:20:69:03:bc:79:6b:65:cf:a5:cb:e0:96:33:68:
8e:8e:65:60:14:d8:0f:67:22:4c:cb:b6:5a:14:b0:96:8e:db:
52:34:b6:7d:33:20:3c:90:5e:dd:2e:4c:9b:3e:b0:60:71:f1:
63:6e:bb:71:3d:94:4a:11:f1:d1:09:b9:a7:9e:5a:97:12:a6:
a4:31:a0:4a:5b:de:3b:64:f2:4c:13:d8:e9:07:0b:86:e7:36:
aa:93:fe:02:f0:06:ef:87:5a:d9:10:e8:6c:a5:73:36:52:e0:
44:54:eb:35:62:3e:f4:2f:0d:e0:6a:42:fb:79:58:d6:f9:b9:
9e:47:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:30 2025 by rpki-client