Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: W7lhpJqs1+KWs6nf6Jjl4xRWEYK7tD2Gbf/r46XXcXQ=
Subject key identifier: 41:1E:89:90:B9:42:19:B7:3B:61:4C:F4:B2:84:01:68:49:69:BC:4E
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 0198C6ECFCEF5A6077330FC970D55B7B86F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 05AA
Signing time: Wed 20 Aug 2025 10:01:16 +0000
Manifest this update: Wed 20 Aug 2025 10:01:16 +0000
Manifest next update: Thu 21 Aug 2025 10:01:16 +0000
Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: Wd2czTg2AnL5FSWh+zo0WBF5E/PqS3giw+J+4s2c568=)
3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ec:fc:ef:5a:60:77:33:0f:c9:70:d5:5b:7b:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Aug 20 10:01:16 2025 GMT
Not After : Aug 21 10:01:16 2025 GMT
Subject: CN=411e8990b94219b73b614cf4b28401684969bc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:3f:63:83:08:b3:e4:a3:49:bd:3b:b7:5a:
90:fc:2f:54:81:46:0d:6d:3e:c9:fb:19:8b:f6:62:
fd:01:ee:9e:34:06:a6:cb:c9:37:1e:59:0f:ab:c3:
0c:04:cd:49:10:26:d1:b5:19:dc:ed:38:c3:ca:9c:
97:29:26:8b:32:bf:54:d9:c0:ae:da:0a:c6:48:cf:
ca:51:a3:df:65:9a:54:13:27:40:7b:a0:ae:e4:09:
88:34:05:6a:aa:30:46:d8:f7:75:8b:15:74:50:08:
aa:a3:a1:66:c7:75:cd:8e:1e:e5:52:bc:4a:f0:36:
ec:53:d2:b6:4a:a5:b3:e6:08:9e:f0:15:b0:9d:d0:
42:03:af:19:15:a4:a1:90:d4:98:f7:cb:d7:19:67:
52:73:d0:64:a0:1c:21:d5:ee:ab:47:db:76:d1:6f:
13:96:ac:01:e1:e1:16:33:d0:87:b6:ae:c7:82:f2:
6c:a5:4b:56:3d:3d:a2:9d:f1:ea:00:3b:12:6b:81:
62:ea:c5:14:b3:40:39:f3:4e:72:4b:42:2b:cf:17:
d7:39:2e:ef:ed:71:bc:41:d6:95:54:10:f0:f0:f7:
a8:1a:6b:82:51:7c:26:cd:df:a2:7a:61:65:90:b9:
44:bc:29:53:fc:bf:18:71:82:c4:43:14:8a:de:1f:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:89:90:B9:42:19:B7:3B:61:4C:F4:B2:84:01:68:49:69:BC:4E
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:89:5c:9e:0a:8a:74:4b:64:1b:eb:7c:19:89:be:4d:bd:19:
3d:e0:80:58:85:4e:74:29:05:19:b4:55:49:14:6f:11:af:f3:
27:da:ab:91:4d:90:59:0f:6a:b1:7c:0b:25:eb:84:e9:3d:f2:
cb:1c:7f:41:7b:6c:3b:59:69:cc:ed:2f:57:3d:11:5f:76:b8:
64:49:66:55:4a:e0:63:98:24:1e:a9:9f:15:37:24:2a:5d:7b:
b0:9d:c0:81:e1:f2:0b:ea:d6:e4:64:c8:e3:70:84:40:ec:18:
db:b5:55:f7:fa:6d:98:d4:02:ee:12:f8:56:52:c9:0f:72:f3:
75:3d:0a:e5:49:c6:94:79:50:61:8e:20:c4:cc:f1:11:f1:4c:
01:83:79:d5:aa:22:af:f5:02:f1:1c:15:eb:fb:0e:34:20:7f:
cb:32:4a:fd:57:cc:0c:2c:e1:73:f1:8e:0b:98:4d:f9:6c:22:
a7:85:e1:77:1e:4f:1e:19:51:20:18:35:df:8d:74:6f:b2:3c:
a9:20:63:cf:07:ee:7a:60:94:2b:3d:82:90:d7:df:05:81:f0:
e2:d0:e9:4e:2b:95:a9:a2:f5:c0:a0:75:dc:d7:06:74:68:90:
c9:68:a7:b5:94:81:44:d3:6b:d1:63:ac:59:8c:b6:61:4c:84:
96:3c:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:14 2025 by rpki-client