Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: AbGIdg3UoENgxT1nUC0s+KNY3haCcHY8yyvddKNmtN4=
Subject key identifier: 4E:BC:88:B8:25:12:44:D8:5A:FB:54:AC:87:09:6B:7E:E0:4A:2C:0C
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 019922C348F29FEB27DA53E1D40677A7748F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0A60
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: UoX4AmmgXN3OPMzes3kBGr6ZXz3X1glQceIs3QGC7z0=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:48:f2:9f:eb:27:da:53:e1:d4:06:77:a7:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=4ebc88b8251244d85afb54ac87096b7ee04a2c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:1d:57:90:8e:32:63:7e:da:3b:c6:4c:b0:
9d:e4:c5:63:f6:37:0c:e6:01:e8:72:1a:18:dc:3f:
34:63:df:c3:f7:23:8d:4e:5c:3f:c7:5f:6f:10:a4:
63:fe:22:4c:47:97:d8:5c:3d:fe:2c:61:c8:ea:2c:
e0:7c:19:37:7d:0d:4c:7b:3a:cc:03:f8:d8:3b:01:
07:5d:12:e1:71:e3:2b:f3:63:5a:cf:e7:11:fd:57:
48:65:1c:bc:e8:6d:b2:7b:87:1f:a0:fe:39:52:61:
d4:ec:50:15:2a:75:e9:d4:c7:9a:1f:47:2a:55:3a:
76:69:93:cb:5b:7b:04:91:7b:cd:87:a1:ca:c6:ec:
ae:7a:2b:4b:3e:0f:21:ba:bc:1c:94:07:c2:4f:d1:
06:d6:81:90:88:38:68:f9:73:bf:e8:f6:71:20:93:
31:36:aa:f3:18:ec:f2:4b:e6:2d:9c:6c:38:26:99:
de:e6:4e:b5:ab:95:32:e8:6c:a6:f6:70:dc:b3:79:
d7:a9:94:b6:8f:7f:0e:42:42:89:71:ee:34:54:11:
24:39:0b:07:84:a8:07:87:af:12:aa:23:4e:8f:49:
3c:8d:6d:80:c5:db:c0:44:4a:61:95:6d:d5:b5:42:
60:21:78:ec:4a:19:07:32:81:eb:95:fd:ab:7d:97:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:88:B8:25:12:44:D8:5A:FB:54:AC:87:09:6B:7E:E0:4A:2C:0C
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:59:59:53:07:fe:5c:37:fc:ca:c4:56:9e:ef:30:8e:26:
c4:af:59:e0:30:07:11:6f:a9:c0:76:a0:d9:41:c9:de:37:a4:
d4:08:a7:29:47:73:bd:d9:ea:15:57:a6:60:16:0c:a7:c3:03:
7c:27:0f:77:8c:8f:17:4a:91:a0:a1:1c:43:7e:17:fd:cd:bc:
72:1b:5e:e2:f1:8f:e7:70:c0:07:c3:41:8a:17:e8:4c:f2:36:
06:ab:42:b2:30:c2:4d:56:54:8e:be:11:e7:54:85:9b:21:11:
0c:a8:f9:a0:cc:75:73:9a:5a:e4:47:8d:c7:9b:bf:37:e5:f7:
3d:77:f3:c9:a0:8b:8d:98:83:c2:69:80:ab:22:6f:14:ba:3f:
09:07:4c:a8:8b:b6:62:3e:c1:96:1d:bb:6d:c8:36:43:fa:c2:
88:71:f6:da:18:ef:34:81:d2:cc:30:d0:d2:85:03:d0:2b:5e:
c5:4d:b2:ad:1a:96:49:3d:75:86:11:15:85:72:cd:79:54:12:
ba:3b:d6:77:c6:a7:0c:6e:74:4e:e0:30:51:a1:41:31:05:51:
55:70:d9:1a:f9:c9:f6:6f:f1:46:92:94:dd:27:51:0b:ae:fb:
76:0b:2b:9c:67:bc:72:21:f9:e4:d8:dc:a6:a0:f7:5d:13:70:
bd:98:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client