Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: HFgTkXw3djfdrWyE9+/p4elEzeTOAtWhsOJnPFEzS4U=
Subject key identifier: 41:DA:C3:EC:0C:B6:37:28:BD:41:50:68:77:02:CC:03:6C:1C:F8:CC
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01991BE6A0B9E1BCDAABAF13ECA93F399F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 12A1
Signing time: Fri 05 Sep 2025 22:02:03 +0000
Manifest this update: Fri 05 Sep 2025 22:02:03 +0000
Manifest next update: Sat 06 Sep 2025 22:02:03 +0000
Files and hashes: 1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: 0wVxSAGW3IZllTWJyXBfk9A+VIRhBCJUG1QJHsgB9fA=)
3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e6:a0:b9:e1:bc:da:ab:af:13:ec:a9:3f:39:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Sep 5 22:02:03 2025 GMT
Not After : Sep 6 22:02:03 2025 GMT
Subject: CN=41dac3ec0cb63728bd4150687702cc036c1cf8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:85:d0:f4:4e:f6:e7:8e:89:d0:f7:db:f8:
2d:1b:94:18:12:06:4f:3d:d6:b4:94:41:16:09:63:
8d:86:33:8b:62:35:f1:ad:5f:3d:74:d5:c6:ac:55:
93:78:16:17:1d:a6:08:32:a4:5c:45:a6:cb:e3:c8:
62:a9:33:9e:a5:7c:ef:79:ee:ee:08:ce:8d:ec:cd:
76:a4:65:b4:e9:ef:e7:fc:38:8b:19:98:76:fa:8a:
04:8b:d2:0a:d9:aa:bb:8d:e2:f2:cb:39:96:29:b1:
4d:58:1e:a1:3e:26:7a:38:c6:9c:47:97:5b:14:b9:
d0:76:a7:d4:8d:13:2a:e7:00:00:a8:8a:0f:94:89:
51:42:99:8e:0f:bf:55:74:90:c4:bc:17:88:de:1e:
a9:f1:7b:0d:f7:c8:14:5d:1e:a4:55:21:88:4b:f9:
c4:0a:ea:5b:ce:fd:dc:4b:5a:91:3c:c5:0c:da:bd:
03:04:6c:3c:61:fe:70:5d:80:8a:68:e8:20:6e:32:
fb:cc:29:63:8a:df:33:7b:f8:07:64:ef:c2:de:46:
23:c2:51:f1:64:fd:8b:76:2d:24:31:ed:e0:a8:0f:
38:d8:c1:73:be:d9:82:45:54:6a:a0:0c:09:a2:39:
72:fa:37:7a:c7:cd:c7:72:f0:77:8a:0b:30:8a:0d:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:C3:EC:0C:B6:37:28:BD:41:50:68:77:02:CC:03:6C:1C:F8:CC
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6b:e0:78:49:62:df:f5:b1:00:9e:6f:f6:a9:7e:81:e1:2b:
02:c1:1f:23:d6:43:3f:21:c0:ca:01:e6:99:50:66:28:d0:75:
d0:26:5c:af:04:d3:1f:17:3c:f2:b9:b3:8c:25:c1:d5:f5:48:
b4:4f:4f:b6:bb:51:a4:36:a0:8a:89:db:04:15:b2:4d:b0:05:
cf:10:34:24:69:e8:74:e1:d1:b2:38:98:1d:8b:54:de:46:2e:
44:f0:b6:b9:b0:37:bd:de:99:8a:3a:f5:de:6e:b2:92:eb:6e:
e0:9e:21:60:8d:43:8e:c1:c4:8e:5b:2b:eb:01:5e:ec:3f:c3:
03:41:a7:76:2d:32:23:a2:d7:bc:67:32:98:74:95:0c:81:0d:
e4:c7:d8:3d:0f:f0:35:a8:4f:17:30:b9:8d:5f:d9:65:1d:a2:
b4:29:22:a4:2b:87:3a:43:3d:9d:6a:b7:81:bd:b5:1e:4d:22:
f7:cf:c6:dc:fe:95:0f:03:b1:c9:4e:a7:52:27:36:13:5d:bb:
9e:14:17:29:f1:0d:be:b9:6e:be:01:a5:d8:28:7e:cd:b1:0d:
15:cf:4b:43:db:9c:43:a4:04:04:4c:c2:a6:d1:50:a0:8e:ad:
3c:cb:75:fc:11:f3:24:95:c9:66:8f:e4:39:a3:be:0b:28:ce:
af:39:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:14:57 2025 by rpki-client