Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: /ZT45b93cx2wobNKUY98I3zqJ7iBSvVmFG1rT71/jTI=
Subject key identifier: 66:9E:54:92:F6:F7:B4:7A:55:98:75:C0:DE:75:F8:B3:DE:D8:DC:3E
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 019922C34695CA98189930FB0C39E24D740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 04FF
Signing time: Sun 07 Sep 2025 06:00:46 +0000
Manifest this update: Sun 07 Sep 2025 06:00:46 +0000
Manifest next update: Mon 08 Sep 2025 06:00:46 +0000
Files and hashes: 1: QMMy8yKbXHEJwsJqLmy-L7XC5s8.roa (hash: YyXDtgRgJkHfVXUNq/vL+FBOo2ylA/9ZRjglYBypKl4=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: KaN2krXDIiFQtTpne2Mv0FSzw7pV5H4w9V9OpU1O9ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:46:95:ca:98:18:99:30:fb:0c:39:e2:4d:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Sep 7 06:00:46 2025 GMT
Not After : Sep 8 06:00:46 2025 GMT
Subject: CN=669e5492f6f7b47a559875c0de75f8b3ded8dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:e8:ba:5d:2d:00:f2:21:66:bd:5f:4e:40:
76:fa:5a:e6:3c:cf:53:5c:1b:f6:79:42:91:77:0f:
ad:ad:d2:05:65:57:6c:ed:08:7d:12:11:c9:c9:e4:
9a:ae:5b:f7:c7:55:68:da:3c:b4:c0:92:34:c0:d8:
07:e0:1c:b1:3e:3e:e1:dd:77:6b:13:70:01:fa:eb:
23:1a:8c:78:47:90:2e:6e:60:90:06:8f:60:db:87:
3c:ba:06:ce:a6:e8:6f:8d:79:91:1b:c3:f3:6e:54:
30:24:a5:51:2a:e8:7c:aa:8f:3a:8b:e0:71:1f:69:
99:07:32:4a:cd:2e:fb:34:ae:e6:79:0f:14:19:62:
d5:0b:be:75:6b:ec:07:68:eb:10:4f:0a:2e:6d:6b:
1e:ad:6b:b9:e9:c1:d6:80:3d:70:06:80:0e:3a:a8:
49:54:3d:1f:a4:82:f4:b8:d3:51:7d:b7:cc:d6:e0:
b4:0b:62:67:f9:e5:77:7c:12:ff:6c:85:a4:c9:c6:
0f:1b:0d:9e:58:b0:93:fa:25:de:cd:21:2e:4a:00:
db:a3:6c:09:80:59:52:33:3d:cb:88:eb:1c:bb:b9:
5f:78:c2:96:d1:ca:e2:dc:06:00:03:d5:ca:5e:8b:
66:9c:e7:f0:27:18:9b:8d:79:f6:26:eb:09:28:86:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:54:92:F6:F7:B4:7A:55:98:75:C0:DE:75:F8:B3:DE:D8:DC:3E
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:79:85:1a:89:c6:cb:6b:f7:47:c5:2c:d7:24:ea:c8:49:
85:49:2f:4d:d7:4d:b0:21:d5:e6:ea:f6:16:c7:a2:30:fd:78:
82:61:5a:b8:10:c4:bf:4b:ce:c9:5f:78:fd:65:4d:fb:07:0e:
63:6d:78:25:eb:3e:54:c7:0b:72:5e:72:e3:71:d8:1b:b1:51:
df:d2:ac:a4:7b:29:ed:d7:bf:9d:9a:0e:35:19:ef:97:a8:40:
34:f2:49:65:c0:ec:fe:18:f2:a5:50:3c:91:5b:ca:2b:e1:e8:
b3:f3:bb:e7:48:82:5c:2a:cd:97:92:b5:ba:81:04:86:6b:85:
a4:9d:fc:05:5d:65:f9:5f:32:7f:2f:41:bd:6e:19:9f:fc:86:
ca:76:e3:73:b4:b7:b8:42:e7:cd:ed:7d:59:5d:e5:5c:57:40:
2f:74:c8:08:9b:08:57:d2:e5:7d:1c:db:d7:2e:46:07:ac:2b:
b6:4f:9a:dc:cb:4a:06:58:c0:fa:b6:b9:8a:2e:9a:93:89:bb:
d1:cc:b1:e7:8c:5c:70:14:1c:b2:9e:78:49:14:8f:9b:b7:3a:
58:db:1f:9b:5d:55:8e:e9:80:3e:a7:5b:93:33:1d:a2:9d:91:
30:60:11:2a:b9:db:d1:59:7e:01:c2:74:c2:e8:82:4c:a5:10:
b0:58:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:42 2025 by rpki-client