Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: UAtO2zctBaXGApYNljjvw3VIf1zu1C0hybyCTiMqSYM=
Subject key identifier: 1A:6A:B8:80:9B:3F:97:E2:3A:FA:49:C1:F4:C6:D6:2E:E4:30:E9:7C
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 0199239F17EC00A5CB74E02090CBA51CF996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 1037
Signing time: Sun 07 Sep 2025 10:00:52 +0000
Manifest this update: Sun 07 Sep 2025 10:00:52 +0000
Manifest next update: Mon 08 Sep 2025 10:00:52 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: X6aujNS45pVe/BlWXWnv7oB4brJZQSY6fHmsjl4r8jc=)
2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:17:ec:00:a5:cb:74:e0:20:90:cb:a5:1c:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Sep 7 10:00:52 2025 GMT
Not After : Sep 8 10:00:52 2025 GMT
Subject: CN=1a6ab8809b3f97e23afa49c1f4c6d62ee430e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:c6:ba:99:96:48:2d:89:1a:09:fb:1d:00:
0f:74:37:cf:aa:cd:14:c3:d1:f8:44:02:5c:d4:93:
90:94:0d:d8:0a:31:9a:8a:50:ba:ab:3b:38:32:b8:
4b:88:10:ea:58:4d:71:4d:e5:db:65:17:a6:eb:69:
18:47:a0:c2:8f:5a:9f:70:72:5a:57:09:92:2e:71:
22:e3:3c:46:e5:78:ad:3b:a7:41:45:56:dd:9a:48:
37:e5:ae:db:72:9e:a3:e9:e5:50:47:52:c4:f3:ca:
62:58:5e:50:50:4f:32:06:cb:cd:f1:55:bb:35:fe:
b3:c6:85:cb:a8:59:5c:2d:50:cd:31:23:a2:50:d5:
b0:49:d9:7a:28:77:f4:fe:6c:28:d0:f1:70:ca:c7:
bc:ab:1d:f5:c9:76:ab:e0:3a:f9:00:be:f3:c6:de:
71:af:5a:11:1d:dd:9a:85:1c:5c:86:ba:e0:e2:22:
c0:63:b9:21:1d:ce:6f:6d:2d:a5:ee:eb:cf:b4:dc:
1b:d0:1b:f9:80:c6:88:ab:e8:72:81:3d:ca:08:b1:
b8:53:95:3b:92:50:d6:8c:3e:06:a5:ea:3e:73:8a:
15:89:d8:53:98:14:a5:1c:50:d4:ae:02:8f:e5:c9:
93:06:39:4d:20:4b:42:0d:d7:45:ff:e8:2c:21:da:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:B8:80:9B:3F:97:E2:3A:FA:49:C1:F4:C6:D6:2E:E4:30:E9:7C
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:3c:95:16:67:74:7e:33:88:c4:f8:67:7b:c4:63:85:03:
8c:f1:d5:6d:f7:45:44:40:d0:5a:ce:77:51:90:71:12:f6:23:
ac:ef:aa:26:d4:8f:53:1b:e2:e0:27:5c:69:ed:c2:ed:9f:74:
7d:98:0e:d5:d2:48:02:28:dd:37:ec:bd:40:e6:48:01:a9:35:
08:53:3c:63:ea:d8:d4:b3:84:9b:fa:d4:5f:08:14:a4:3f:78:
5e:c7:f8:aa:bc:03:d7:b3:c1:15:fb:06:a9:d2:b3:66:e4:7b:
2b:96:52:2a:ba:52:3c:ef:17:15:69:38:79:16:c3:58:32:d6:
f5:d0:1c:f2:ea:ab:5b:95:3a:2f:e7:f0:b1:c3:0d:ee:ef:7f:
d0:d8:12:15:b4:1e:b9:c4:e3:f7:0c:87:b9:3e:65:a2:cb:13:
02:22:92:79:84:1f:92:18:e8:f3:fd:f9:ea:cf:1f:91:83:fd:
fa:5d:50:7d:47:7f:fb:d8:69:6d:fb:b2:19:9c:e9:a5:dd:3f:
43:09:66:9c:ff:28:43:d8:cc:58:d9:5e:e4:a1:f5:a3:f8:c8:
41:a1:36:45:a6:b2:a7:7f:3d:ee:5c:51:94:29:92:77:03:c6:
21:cf:33:ec:9e:f2:78:03:9f:3f:bc:64:81:f3:14:ce:55:77:
f2:a3:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:12 2025 by rpki-client