Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: VjKQlIOr3ZELBDSE+/BvJuQqMJhS1kUEQVhvGkzYg3c=
Subject key identifier: A4:9A:58:47:AD:64:14:97:CD:DC:02:E9:BE:9A:F3:38:6A:35:91:FF
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019918E4FA27B0FB3D8F059C81646F3E6C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 0369
Signing time: Fri 05 Sep 2025 08:01:23 +0000
Manifest this update: Fri 05 Sep 2025 08:01:23 +0000
Manifest next update: Sat 06 Sep 2025 08:01:23 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: HPq/2kdyX/CmpGU/4iBdK21ilkuouQv7xsSiWTU9aiY=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e4:fa:27:b0:fb:3d:8f:05:9c:81:64:6f:3e:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Sep 5 08:01:23 2025 GMT
Not After : Sep 6 08:01:23 2025 GMT
Subject: CN=a49a5847ad641497cddc02e9be9af3386a3591ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:24:72:55:82:ff:04:b2:5d:0f:77:a5:d0:
2b:96:ce:d8:65:47:04:c3:77:ef:44:a7:10:b1:24:
9d:a9:f4:98:9c:5b:ae:a4:85:b5:bc:e7:ec:12:4d:
76:00:e7:ca:c7:a9:42:fe:af:19:d4:9c:a8:95:e2:
d1:f9:00:4b:fb:e7:02:05:f0:71:c4:d7:1a:85:e7:
af:a2:95:c6:8e:27:ed:b5:e8:41:37:d3:e9:ab:df:
14:37:24:b5:bd:28:12:92:07:c9:7d:c4:50:e4:b5:
95:75:92:d3:c8:e9:f4:45:3e:5f:23:0f:ce:81:bd:
da:76:03:29:95:c5:20:e3:50:a8:3f:aa:32:b7:5d:
4d:05:30:d9:e2:a3:44:16:b1:e1:9b:e1:7c:d1:cd:
98:c1:cf:f3:de:7e:bc:1b:53:fe:92:5f:9d:96:3d:
22:5b:52:9f:f4:1b:65:ee:e1:3c:95:3a:23:38:fc:
60:1d:56:ae:b5:23:30:c8:a6:70:f1:52:31:1a:8b:
39:80:28:a5:89:7d:3f:59:e5:17:fd:ed:08:71:48:
ee:99:f7:bb:ce:40:5c:d1:96:46:6e:13:6e:fe:b6:
ba:37:13:0d:05:67:e0:ed:0c:b7:b8:3f:d9:6c:af:
72:a8:52:c1:fd:7e:52:94:49:57:92:a2:86:64:3c:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:58:47:AD:64:14:97:CD:DC:02:E9:BE:9A:F3:38:6A:35:91:FF
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:86:ac:69:69:c6:9a:89:12:7d:94:d4:69:82:73:27:4a:73:
eb:9c:5c:79:99:df:48:09:8c:5c:42:1f:f8:02:9e:70:c4:b3:
50:b5:80:45:66:b6:35:d3:d6:c4:6d:06:16:12:8d:1f:2c:17:
44:b3:94:e0:20:36:3a:55:7c:f4:71:9f:fe:1e:8e:94:c6:bf:
34:c4:13:8a:e8:81:1b:cf:9f:5a:db:00:81:04:69:0c:34:b4:
69:4a:67:0e:0b:a2:3c:de:a9:99:1c:27:6e:1e:60:c1:0b:d9:
b0:32:fe:55:da:65:7c:c0:3c:66:92:ce:c8:b9:e1:3e:17:28:
1a:01:e4:60:90:7d:16:1b:d8:fe:e4:a7:16:ff:01:21:93:56:
a1:b0:fe:fb:9c:e4:e7:b1:4a:10:66:46:57:f5:39:29:c1:f4:
35:00:01:9d:c3:ba:f3:ca:05:b2:5f:7c:f4:1b:2a:ea:db:5b:
9e:0d:95:ea:b1:c6:12:af:f5:b1:e8:18:a1:d1:b5:3b:14:0e:
75:1f:c1:8f:9e:9b:e7:5a:76:a9:ef:bc:9c:af:8a:45:45:e8:
e0:21:2f:8a:7c:08:db:fb:6b:f8:95:c0:d0:df:c0:09:60:82:
93:b9:db:a4:c3:4c:c9:58:5e:a2:43:86:73:32:0a:6f:85:56:
4a:77:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:22 2025 by rpki-client