Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: /XCg9itpvs9UujsBAOM+GW+Pyi9wEWd95kFS0hKQh2A=
Subject key identifier: 83:D5:CD:CA:FB:4F:CB:70:00:16:83:AC:46:95:55:C6:6C:27:45:82
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 0199239FEC41BE843C2E7A4DFFD646A94599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0D41
Signing time: Sun 07 Sep 2025 10:01:47 +0000
Manifest this update: Sun 07 Sep 2025 10:01:47 +0000
Manifest next update: Mon 08 Sep 2025 10:01:47 +0000
Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: WZpcSSG48h0DbVymmmN2z7CiEds4SOpjvGwH+EuUE90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ec:41:be:84:3c:2e:7a:4d:ff:d6:46:a9:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Sep 7 10:01:47 2025 GMT
Not After : Sep 8 10:01:47 2025 GMT
Subject: CN=83d5cdcafb4fcb70001683ac469555c66c274582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:f9:d8:3a:0b:f4:ee:46:fc:13:79:e3:cb:
cb:ae:a4:a5:be:fb:de:5e:0a:94:8b:28:2b:0c:fa:
76:92:8b:19:e0:5c:c1:0e:b4:70:e6:48:35:a9:0b:
d4:51:40:4d:43:97:80:3f:fc:06:d2:44:2f:fe:bc:
f5:b7:60:0e:16:4d:a0:ea:28:47:5e:c7:e7:36:01:
96:a9:61:79:aa:1b:1d:70:e2:17:ba:87:29:06:c7:
27:94:51:b0:de:ae:0a:f6:b3:14:92:90:7c:57:a5:
e4:03:06:4b:42:a3:89:a5:1c:54:bd:af:2d:16:78:
c6:41:9e:09:ce:a5:a5:41:41:ca:ac:76:0f:9e:60:
e9:30:9b:65:60:61:09:e5:1f:48:a9:77:7e:17:38:
0a:45:7e:3f:2c:4c:aa:96:d7:83:de:66:30:62:01:
c9:67:de:b2:dd:42:18:59:9e:cd:89:39:a4:54:6d:
0e:db:ae:7f:c5:79:05:57:10:d3:0e:e0:b9:73:20:
4f:bc:c4:c3:a3:7a:7a:41:6e:9e:f6:78:07:f4:72:
59:23:74:90:47:86:ab:b0:c6:d6:4e:ac:97:ca:d2:
55:de:36:ea:4c:9d:ac:c4:dc:9d:5d:16:f5:2e:5a:
92:e0:da:de:81:bf:55:5d:59:6f:d0:36:ac:3b:70:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:CD:CA:FB:4F:CB:70:00:16:83:AC:46:95:55:C6:6C:27:45:82
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:06:5b:6c:20:b7:3c:d1:e4:73:41:75:94:a9:5d:4d:0b:5b:
a8:3f:19:37:a2:38:38:9f:47:a6:3f:98:d4:2d:95:fe:cb:07:
47:ce:fb:4a:50:38:9c:80:14:70:d8:03:b6:8f:08:cb:81:4f:
26:74:ab:02:e1:a6:19:d8:ee:42:09:4c:ab:32:1b:14:45:84:
17:b7:a4:f1:04:39:76:a6:f9:60:27:72:71:49:f6:42:39:48:
fb:53:ce:ca:cf:d5:3f:f6:91:e5:c6:71:87:12:e4:2d:b2:1b:
fa:28:82:58:b1:9a:e7:3c:31:32:b0:f7:a8:54:77:13:af:89:
00:1f:06:9b:26:76:53:89:09:9d:b8:41:b6:ce:e8:89:5d:ed:
d8:46:90:c5:e5:17:65:36:1d:86:d0:03:9f:f4:ad:79:58:f9:
69:ae:69:b4:d4:fb:52:6e:88:5c:43:f7:aa:ea:c2:c1:83:c4:
be:46:aa:37:2e:42:e7:d9:3e:76:f8:ee:b8:a1:d9:0b:9d:e8:
ae:90:bf:b6:f9:f9:9a:c2:70:06:37:68:77:d6:77:38:e5:78:
09:bc:4e:6c:9d:f6:71:63:54:a9:04:1b:96:ba:fb:31:32:cf:
84:22:f2:22:fd:2e:de:ab:3b:da:e2:b6:44:e5:f8:11:ab:1a:
15:d5:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:44 2025 by rpki-client