Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: EQMtlGBfG4KGgTY7oLly+4RzZFoyWEjAxsEoHrZoqmw=
Subject key identifier: D3:01:D1:BB:E3:A3:C1:4A:21:E4:8D:C3:17:37:8B:92:4D:ED:7B:57
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 019954C263432B8A41D8F71D8E8A47F4A24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 1458
Signing time: Tue 16 Sep 2025 23:00:49 +0000
Manifest this update: Tue 16 Sep 2025 23:00:49 +0000
Manifest next update: Wed 17 Sep 2025 23:00:49 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: EjB+vzs3ktSfHEdDY+Mk20i+xN3IxOOAGOkq92Ib4t8=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:c2:63:43:2b:8a:41:d8:f7:1d:8e:8a:47:f4:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Sep 16 23:00:49 2025 GMT
Not After : Sep 17 23:00:49 2025 GMT
Subject: CN=d301d1bbe3a3c14a21e48dc317378b924ded7b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:c5:ff:aa:e3:10:b1:48:97:35:e1:e4:b4:
d4:39:b9:8b:49:e8:10:b6:4e:15:6b:d4:72:68:e5:
25:e1:e6:7a:9a:2e:0e:45:ce:25:ac:60:66:a8:d5:
40:c1:56:d5:87:16:eb:e9:0f:47:70:68:44:c7:71:
be:2b:2e:ec:c3:55:00:4a:97:a3:75:8f:e9:94:7e:
92:f6:e2:d2:8b:41:b3:16:ec:9b:18:f3:5f:4d:b9:
2c:78:c0:60:fb:b4:8f:61:7c:04:1e:2e:ee:a9:4f:
ef:1b:ab:74:e1:f3:bd:98:d4:a9:79:70:97:a7:51:
0e:bb:cb:19:02:7c:14:b7:3c:45:c7:1c:77:ad:e7:
a2:00:cb:50:99:66:26:f1:e6:ee:4f:0c:c0:06:a1:
4a:58:68:eb:4b:e2:48:84:4d:30:ae:49:4e:4c:7c:
5b:f1:e6:45:b0:c9:9d:ff:c0:87:10:9b:e7:9c:cf:
84:0a:3c:bc:c8:96:39:1f:88:c3:ab:d7:db:48:af:
d7:1b:14:e9:ff:99:03:74:76:c0:21:a7:06:ed:c1:
7d:85:40:e9:0b:d9:58:d4:fb:de:4b:7a:ca:a0:04:
96:9f:2b:20:c2:dc:48:df:49:ea:11:4d:f2:1a:61:
c9:21:8e:03:4a:a6:b1:6b:b8:b6:2b:5a:4b:7e:ee:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:D1:BB:E3:A3:C1:4A:21:E4:8D:C3:17:37:8B:92:4D:ED:7B:57
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c7:6c:03:58:58:01:2c:0a:6b:3a:19:7f:69:2e:d2:5b:2d:
2b:64:ef:2a:b8:88:f0:8a:70:8d:03:8c:4e:b8:1a:81:51:94:
af:34:ce:27:a0:f2:98:56:4c:8d:cc:03:a0:88:9c:bf:04:c9:
a5:ef:75:ec:19:c3:98:6b:94:33:66:18:32:99:f8:bb:92:d8:
b1:86:cc:d5:8e:31:7a:aa:32:73:bf:99:56:e9:08:6a:32:7e:
c3:a5:98:49:83:2d:41:82:ea:9c:88:0a:1d:7b:a1:a6:34:6b:
6e:c2:0a:b6:0e:bd:84:47:f5:26:4d:37:12:cd:e7:e3:a2:14:
f8:d5:61:22:13:8f:ae:f1:76:b1:0a:89:ca:39:ef:ea:76:6c:
18:f9:75:47:43:5b:c2:33:a0:05:19:96:01:c3:de:02:80:ef:
ef:f0:41:d8:50:9d:4b:17:b7:97:bd:83:51:92:d5:4b:a4:bf:
dd:6f:3e:dc:5b:23:36:b4:08:6c:ca:36:00:02:b7:00:0f:4d:
c3:20:1b:4b:ae:d3:d3:aa:ab:9a:4b:94:83:c8:bd:52:1d:83:
63:f7:ff:82:0a:73:d1:0c:25:91:07:18:d0:5b:d8:26:8e:e4:
22:d0:23:f8:44:82:a4:5f:a4:50:47:86:3e:ac:97:69:48:a4:
43:0f:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 08:39:10 2025 by rpki-client