Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: h1qT2B4AIOegXq2XDCThBN7cjSn7U07engVmKQPNXxs=
Subject key identifier: 1B:23:C6:D4:33:CB:40:29:93:65:9C:87:2C:95:24:AE:A3:EB:E0:0E
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019922FAD1627501BD59674A33EACB711D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 1468
Signing time: Sun 07 Sep 2025 07:01:26 +0000
Manifest this update: Sun 07 Sep 2025 07:01:26 +0000
Manifest next update: Mon 08 Sep 2025 07:01:26 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: CdQgaXY+kXWq1xiviuKk/rAEEuQaYojrf4dvO2pItzA=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d1:62:75:01:bd:59:67:4a:33:ea:cb:71:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Sep 7 07:01:26 2025 GMT
Not After : Sep 8 07:01:26 2025 GMT
Subject: CN=1b23c6d433cb402993659c872c9524aea3ebe00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:37:3e:39:22:bc:b8:ec:32:83:5c:a0:19:
0b:47:60:77:45:67:9f:3b:7e:5f:13:55:a1:b2:ba:
1d:c7:a9:89:14:3a:5c:5b:e6:a8:ee:90:cb:71:14:
26:33:cb:ce:66:b8:49:df:fa:c5:b3:ee:bc:df:ca:
da:01:1e:6f:76:f6:c7:93:aa:6c:c3:0e:ac:7f:6d:
d9:bc:c8:62:79:02:66:e7:32:67:84:c2:39:eb:34:
60:77:fc:93:de:01:21:54:e7:10:6a:04:19:cf:54:
c0:27:22:bd:53:39:65:e4:82:41:b4:e5:15:80:d0:
46:00:e3:a3:67:c1:b0:44:aa:f5:1c:c5:4c:82:4b:
70:1d:90:87:d2:5f:d6:05:19:4f:7e:22:04:01:04:
43:26:f2:7a:94:57:4e:c6:ed:8e:72:99:60:89:fe:
2f:3e:e3:cb:0d:5a:47:6e:03:aa:f5:ee:08:89:a0:
70:1d:33:b0:0c:43:14:21:19:3b:ff:57:b8:f4:b9:
2b:ed:41:5c:93:81:9c:07:d8:23:8a:15:2f:7e:85:
13:60:12:82:07:e2:2c:16:92:6b:64:d8:b5:7e:93:
15:bb:f1:fb:44:94:0d:37:05:21:6c:81:19:93:d9:
8a:1a:17:52:85:b2:bc:07:7c:75:dc:90:d6:d6:fb:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:C6:D4:33:CB:40:29:93:65:9C:87:2C:95:24:AE:A3:EB:E0:0E
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:00:30:cd:dd:77:7b:6a:9f:26:34:1b:b5:28:f7:fd:0f:e8:
bc:d5:a2:a6:5b:9b:b2:af:70:9d:a2:78:ed:e7:14:5e:99:67:
40:c8:bb:af:b0:50:01:6b:4c:21:63:ed:39:83:29:3f:2d:5e:
5f:92:8a:29:1c:ca:a8:2e:b2:03:41:aa:55:86:5f:35:6f:07:
0a:9e:5b:28:af:f5:38:bb:2c:6b:b9:05:90:4b:f8:1e:57:a0:
f9:25:da:a0:81:02:5b:0e:92:95:7c:df:d7:e8:e2:70:f6:c1:
22:04:c6:dc:f4:41:00:0f:61:db:a0:f7:ac:40:dc:bb:66:ef:
3e:3b:fb:86:e5:15:34:f2:56:5c:36:6e:4f:71:9e:7f:6c:d2:
a5:8f:57:46:c3:78:fe:77:5d:d1:12:c9:d0:93:d4:d4:4b:0e:
a1:26:71:27:d4:97:e9:9a:97:12:8b:46:f1:d2:6a:8e:9d:34:
7e:1c:42:7c:e0:0d:78:32:67:9f:c9:ba:15:58:81:7c:dc:ba:
a7:a3:84:e6:ee:fc:da:55:40:0e:04:dc:ca:44:a3:9b:6e:57:
2b:b2:78:95:26:f1:80:2a:ec:d9:fd:20:b4:c4:fa:2f:ae:4e:
13:ca:50:b7:cc:e6:85:65:66:22:ff:49:2e:0e:a2:91:ed:1d:
46:4f:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client