Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: gRY3sx00RIWn+ASYK67vq2X4ShhSpjjavaENivsZU80=
Subject key identifier: 3D:FE:85:50:34:ED:AC:F4:0E:A7:02:56:5A:A8:2C:2B:5E:17:69:1E
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019923D5C24CE7DEFEB94A221DD1EBE301A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0AC1
Signing time: Sun 07 Sep 2025 11:00:35 +0000
Manifest this update: Sun 07 Sep 2025 11:00:35 +0000
Manifest next update: Mon 08 Sep 2025 11:00:35 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: tiEMlQfJ3JjTSNQYBUFi3Bt+gonND+BLSs4tMpQP5pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c2:4c:e7:de:fe:b9:4a:22:1d:d1:eb:e3:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Sep 7 11:00:35 2025 GMT
Not After : Sep 8 11:00:35 2025 GMT
Subject: CN=3dfe855034edacf40ea702565aa82c2b5e17691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:b6:0d:f6:b1:03:73:0e:66:bb:4a:fd:ef:
dd:7b:53:10:ad:11:a7:67:58:05:0b:35:38:a1:e1:
b3:77:01:35:c7:e7:f5:3c:93:fd:5b:de:4b:0b:32:
39:7a:bf:50:f6:e9:7f:0a:f5:cf:d4:bd:e6:16:bf:
92:86:b7:0e:da:08:b6:96:61:cf:74:cf:2c:ca:ad:
11:66:23:49:be:27:7d:20:17:a2:0a:eb:0a:a5:76:
a3:01:13:d8:f3:70:de:4e:e7:b7:e6:16:97:d7:91:
f6:2b:f5:01:a7:85:cf:69:76:e3:b5:e5:36:00:e8:
b0:f9:e5:05:72:8c:9a:e7:b2:b7:4d:e5:26:7b:82:
27:bd:0c:36:c3:4d:7f:b3:33:7f:52:33:28:0f:81:
ea:67:5c:8a:22:e5:30:2f:1f:60:08:f3:0c:55:de:
de:a6:ab:86:b8:5a:eb:f6:be:82:96:ff:65:21:be:
17:c1:db:bb:62:77:35:f0:25:9f:ed:1e:7f:3f:28:
a6:7b:13:86:c0:3a:c2:a8:14:24:fc:ef:dd:13:e3:
3e:f1:23:1e:53:45:cc:08:29:ca:6f:52:9d:45:9c:
ef:9e:64:e5:e4:a0:13:0b:61:ef:60:dc:c8:67:10:
a2:11:b4:d1:26:25:de:85:26:79:b3:76:57:3f:86:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:85:50:34:ED:AC:F4:0E:A7:02:56:5A:A8:2C:2B:5E:17:69:1E
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:7b:d1:9b:d2:1c:19:50:6e:56:fa:3b:78:c6:6e:fc:8f:
49:bf:43:14:26:8f:30:e8:2f:64:ce:83:e5:55:1c:1e:0a:57:
6b:00:5f:c8:65:81:a8:12:5f:f7:12:df:96:49:a4:13:d3:11:
52:65:a5:92:5f:d0:9b:a6:bd:8b:77:72:54:5d:6d:72:6d:c5:
37:8d:6c:5d:e4:01:47:84:e2:5f:77:e6:5a:c6:e1:53:5e:60:
e3:bb:55:10:bc:f1:e8:ae:e0:75:76:c4:fc:12:07:b6:1b:03:
f3:10:12:94:f0:06:69:2a:20:d7:62:1b:7f:7b:3e:ef:43:2f:
54:1e:1c:15:a4:41:44:f8:9f:25:8b:f2:66:7f:0b:29:ec:aa:
30:2b:ae:4f:3a:7a:f3:f7:6e:a6:e1:b4:44:33:0f:04:3b:d5:
1e:92:ae:60:50:eb:56:8a:5f:02:18:27:75:65:54:d8:f3:ef:
4b:7b:a2:4a:c5:0e:ff:b3:9e:4b:82:7f:ea:6c:b6:21:d4:bb:
8a:7b:36:b2:65:16:31:6c:a6:a3:44:8d:3c:6e:a9:51:5a:d7:
c5:9a:1f:fb:76:92:26:a9:5f:d4:56:eb:2b:e3:55:6e:a6:52:
49:e1:39:5f:f5:d2:8e:50:8a:75:b4:4e:66:38:37:bb:fe:90:
43:ce:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:48 2025 by rpki-client