Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: 9zJfd7MHqU61gxd459ZIpDvsLQzAkM7PpBrzzFmieC0=
Subject key identifier: D4:C6:F6:3C:E0:6D:E7:40:2E:61:A5:A5:09:E1:4D:CF:D1:37:75:77
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 01996548DB342231F49BECB826D1E4D8380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 1626
Signing time: Sat 20 Sep 2025 04:01:37 +0000
Manifest this update: Sat 20 Sep 2025 04:01:37 +0000
Manifest next update: Sun 21 Sep 2025 04:01:37 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: JGrl4D8Olpe5I6IJAHIKmyOrT8gqdAmkHGsKiW2BK+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:48:db:34:22:31:f4:9b:ec:b8:26:d1:e4:d8:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Sep 20 04:01:37 2025 GMT
Not After : Sep 21 04:01:37 2025 GMT
Subject: CN=d4c6f63ce06de7402e61a5a509e14dcfd1377577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:e6:af:25:c1:b3:15:d7:dd:96:5c:ce:f9:
26:f7:09:da:75:bb:7c:c8:eb:95:cf:f4:dd:56:f4:
bb:a7:78:b9:f3:d3:52:ad:ff:b5:f0:96:b0:65:ee:
41:96:87:18:09:5a:bb:04:9c:a7:15:45:f3:54:95:
74:f7:16:10:63:4c:6f:9f:e6:07:30:6b:3f:49:7f:
91:ba:f3:05:f7:c7:b4:f1:75:43:21:f9:a3:01:bf:
d2:40:7e:b0:c5:65:a8:61:a5:fe:85:38:14:58:69:
71:7d:88:4a:0f:fa:a7:e6:07:a8:6f:ec:ca:9c:b2:
de:2d:4f:57:a7:5b:02:29:3d:ec:0c:e2:01:1b:75:
db:21:0e:3b:8a:1f:27:d4:ec:d0:b5:81:ca:b9:ca:
d7:64:a7:1d:a5:37:8f:70:d8:a0:83:3a:ad:cc:48:
9e:b4:2c:a7:c6:9f:f7:d1:55:12:35:63:4f:6d:b7:
e6:ae:cf:9c:a5:14:ac:02:22:80:2e:31:f1:09:c6:
b5:a6:a5:3c:91:23:ff:8e:7e:13:40:15:c9:be:c2:
b7:6a:f7:9f:9e:b4:2f:d6:ce:91:f8:4c:f5:51:fc:
99:a9:cf:5f:b2:ea:55:1e:e7:e7:3b:12:88:bc:ae:
33:3f:d5:83:2d:84:c0:77:73:b2:55:88:2f:2c:34:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:F6:3C:E0:6D:E7:40:2E:61:A5:A5:09:E1:4D:CF:D1:37:75:77
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:64:9f:a4:2d:97:7f:e0:f7:30:df:df:1d:bd:17:6b:28:5b:
77:f7:64:0b:aa:65:70:a5:ab:b8:20:68:0c:9d:4c:ec:73:21:
8c:a4:74:98:ac:dd:a7:ee:04:be:0f:ed:c3:15:6f:1d:4b:72:
62:75:ff:b0:c8:11:22:3f:7f:7b:48:e8:c5:27:02:65:2f:5e:
ba:9b:82:1b:cb:ad:b1:56:5d:ff:a1:5a:f8:62:fd:30:21:1a:
b3:11:bf:3f:f3:26:c5:0d:37:a7:9b:a7:80:3d:e7:66:c5:e1:
5d:29:11:65:de:9c:eb:3f:a3:f6:f1:a4:12:e8:7c:8d:39:ca:
2b:84:ca:3f:32:69:3f:c3:96:3f:f7:76:46:8f:6a:2b:85:46:
9b:25:71:28:d1:f8:2e:ac:8f:94:f2:c4:24:d0:fb:66:8f:f0:
a3:b7:0e:07:26:dd:01:17:a5:f2:7d:6c:b4:b3:f8:5c:ab:cd:
b4:87:07:dd:d2:85:36:fe:60:85:8a:8a:7f:7f:57:db:2d:a8:
98:ce:b6:2f:59:e8:b1:a0:e8:77:06:27:50:e4:b1:f5:3e:fd:
cb:e0:e1:e8:52:9f:ea:cf:5a:91:df:da:69:e2:e8:9b:a0:0d:
83:39:2a:ad:e0:39:12:5e:33:e2:ea:02:71:94:fe:f2:6a:b3:
b1:06:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 06:02:33 2025 by rpki-client