Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: ReIO9txFTWU5/gbTkryTb9mDbSGlCghaYX7rKfapUGg=
Subject key identifier: 5B:84:84:1F:72:E7:E6:F2:7D:60:56:03:80:A9:42:A7:76:BF:95:03
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 0199228C8993DC578C5281D361092CC6DFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: 03AE
Signing time: Sun 07 Sep 2025 05:00:59 +0000
Manifest this update: Sun 07 Sep 2025 05:00:59 +0000
Manifest next update: Mon 08 Sep 2025 05:00:59 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: FWNE4HyZhEwT/CHDE5JCyx5qwwVNXk9qq7YsTZGBQD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:89:93:dc:57:8c:52:81:d3:61:09:2c:c6:df:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Sep 7 05:00:59 2025 GMT
Not After : Sep 8 05:00:59 2025 GMT
Subject: CN=5b84841f72e7e6f27d60560380a942a776bf9503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:aa:59:d6:0e:1e:ee:f6:58:ec:5d:fc:b3:
e3:0a:c1:6c:a8:c6:14:33:c1:12:7f:28:92:95:32:
d2:58:cc:69:1c:ca:8e:6d:ff:98:02:49:48:d0:72:
81:be:92:fb:44:de:60:5b:6a:5c:c0:fa:6b:c3:77:
c1:52:92:24:f9:cb:dc:36:19:c0:1e:c8:ea:e7:83:
6f:d1:2d:ee:2b:25:20:0d:58:bd:04:ba:a0:ce:86:
01:0c:ad:92:50:51:f6:48:27:e9:e5:bd:26:d6:a7:
31:bf:ab:2b:0d:7f:58:d5:7f:b8:ee:97:e0:48:31:
40:b7:23:c9:65:34:bf:fc:3f:9b:c9:f3:8e:83:b0:
c6:3f:78:81:18:6c:b3:8f:5c:b1:f4:df:15:48:82:
e3:01:1a:d9:6f:b0:98:23:5b:e5:45:93:d2:57:cc:
ed:84:ff:89:29:e8:c1:7d:71:48:db:2f:6e:35:d3:
79:1e:1a:af:47:a3:c7:cf:a9:dc:a4:92:f3:1c:11:
e9:67:80:c2:4c:c0:64:c4:7d:dd:de:86:2e:6a:06:
af:51:95:2c:28:d1:09:00:d8:ee:a9:aa:13:ba:0d:
9e:51:be:78:ad:af:87:7f:db:ca:ed:93:13:ca:48:
0a:5a:82:c9:39:5a:22:d7:a7:3a:e3:ef:39:52:ed:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:84:1F:72:E7:E6:F2:7D:60:56:03:80:A9:42:A7:76:BF:95:03
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c4:89:0b:a4:42:71:c4:b2:f9:e9:1a:6e:7d:90:a5:cc:b0:
5a:3e:c6:08:18:95:99:d3:6b:42:80:85:c6:53:8f:aa:1d:a4:
c5:c3:64:b2:ae:b6:0b:6d:31:26:5d:31:96:b6:0f:f3:c1:d7:
40:e0:25:74:9c:3d:ef:8f:6b:7a:d7:b6:f0:20:9e:89:b9:02:
2f:35:6a:51:a8:b2:38:27:ca:7b:23:85:04:bf:91:30:4e:24:
4c:b0:23:c3:83:90:bf:a6:47:2f:51:b7:dc:53:73:62:27:6e:
47:3c:41:32:d9:ca:83:7c:01:24:fd:98:da:28:5b:85:94:8d:
4d:41:4b:8c:01:4c:08:01:a2:64:be:84:d8:21:6a:b3:73:66:
56:98:f9:1b:2e:48:0c:13:5f:40:54:8b:1d:da:e5:a8:56:a1:
b8:a7:1a:bf:6c:60:0c:11:1e:21:8a:7a:8c:c3:0e:aa:db:92:
f5:8e:45:a3:5e:a0:00:33:9e:9f:24:49:f1:26:62:be:75:ee:
3b:4d:e0:11:96:f6:e8:21:cb:8f:1c:55:1b:d7:7c:fd:4f:12:
84:c7:14:45:12:1f:95:c3:db:8a:01:90:bc:a2:cd:68:14:2c:
68:46:17:52:e7:4c:57:12:a6:de:db:64:fd:cc:77:c9:3e:10:
5a:d6:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:48 2025 by rpki-client