Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: IXZGxQ5Mq+4zFYfrEY5r6zM59cXvOIwemVXpotN8muo=
Subject key identifier: 30:D7:80:39:00:9D:E4:20:BD:EB:BA:D1:44:BE:CD:D1:64:BB:24:1E
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019922C36A561C8F494AA80DC515506BC31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 4E
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: vJVElTvPzbOzelerJapYjw+83GOYfiA/RwDK+HgXXso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6a:56:1c:8f:49:4a:a8:0d:c5:15:50:6b:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=30d78039009de420bdebbad144becdd164bb241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:cd:cf:00:eb:6d:21:dd:3b:6e:b3:41:ac:
a1:62:2a:1c:87:63:9b:18:2e:35:8f:ab:8b:8a:c4:
21:e1:4a:44:14:c8:81:da:f8:56:c9:a9:92:54:cd:
8e:0e:a6:c4:1a:ca:c3:c6:ed:e5:dd:b5:8d:09:5b:
7b:24:9e:62:aa:cf:33:bb:c5:1e:04:e0:67:b5:bd:
cd:43:d1:24:65:a8:37:7a:2d:f9:82:d4:c4:93:dd:
a7:c8:ce:55:8a:4d:34:90:f9:b7:08:16:5a:8d:f7:
33:57:6e:d1:25:41:d6:df:df:f1:c2:40:ae:0f:0d:
73:99:81:d4:2e:ea:f3:1c:94:de:6a:5f:9b:9e:47:
12:34:1c:56:77:6a:dd:ff:67:75:fa:9a:7f:78:03:
10:32:32:cb:b8:ab:97:58:3a:0a:bd:75:ff:b5:c4:
bb:cc:3f:da:e7:3e:67:2e:9f:cf:48:7e:ec:a7:c6:
0a:3d:33:40:54:06:97:ea:11:07:af:f2:b4:c3:6a:
d5:a1:26:52:38:9e:b0:a1:d4:b8:ba:f5:07:b7:6d:
44:0d:ab:ba:ac:d3:0c:b7:65:c3:53:9f:bd:69:a0:
e5:3f:b3:52:f3:12:e2:76:2a:2b:29:a6:20:64:38:
a1:aa:9f:75:93:21:d0:36:6b:91:82:32:78:e4:ef:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:80:39:00:9D:E4:20:BD:EB:BA:D1:44:BE:CD:D1:64:BB:24:1E
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:34:89:52:8f:bb:05:9d:42:22:fc:4a:b4:59:69:04:8e:
b3:08:8d:a0:a0:72:43:41:09:69:c6:a8:e8:38:77:4e:f3:ea:
ac:13:6a:59:1e:b3:01:73:39:1d:18:94:f9:ef:9b:97:ab:04:
06:70:99:e0:4c:fc:76:90:06:38:a0:d6:92:10:82:c7:d8:c5:
48:56:e8:25:60:92:ba:48:18:2d:2a:63:c3:b6:33:dc:41:66:
c0:67:9f:56:fe:85:53:84:34:6f:3e:02:6f:2a:cd:de:ec:92:
53:11:10:ee:68:cb:a1:fa:74:5a:09:89:a4:ea:62:01:53:fb:
0e:f8:d1:22:17:fe:0f:1d:66:5c:9e:6b:42:21:03:f4:1b:50:
30:d8:84:30:b2:a7:0c:70:cd:8f:22:33:04:c2:5c:3f:ad:b2:
57:06:41:c9:a7:65:f6:3e:8b:fd:16:71:9c:06:75:f4:7d:4b:
31:e5:46:72:d0:7a:ea:f4:52:9d:74:0e:9b:f7:22:73:da:4e:
16:37:07:5c:3e:62:59:c4:73:57:12:d3:ae:e5:3b:79:d3:b5:
ad:31:7f:b5:3e:73:6f:6d:dc:d0:a9:59:0e:33:85:e2:3f:55:
17:af:f9:5f:02:13:cf:a7:b9:50:28:6e:00:8d:37:a7:45:da:
54:0a:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:34 2025 by rpki-client