Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: vKGh/D8sdsLfO7cvnhErq5Z/my3PRSfSGMZTFXn5hGE=
Subject key identifier: A5:17:91:7A:C6:4E:B7:7A:3D:C0:47:0C:3C:BC:C3:C6:DE:50:31:1D
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 0199228C2D0E8F1B268CCA58A5E87D8F7651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0D43
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: c72Wx0qeTvv5UBacH+XAzCoERU83W/3ghz4y+y15VOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2d:0e:8f:1b:26:8c:ca:58:a5:e8:7d:8f:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=a517917ac64eb77a3dc0470c3cbcc3c6de50311d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:1c:f7:e2:ac:13:48:6b:ee:07:8f:6b:f2:
eb:69:88:f6:6c:4c:19:fa:92:bc:c0:17:1f:90:96:
a3:fe:4d:0d:71:26:74:59:0f:82:b6:c5:50:ad:13:
a8:d7:fc:17:2f:cf:70:04:f2:93:82:58:43:2d:21:
31:66:3e:21:39:3c:45:2c:53:70:6c:9e:ea:37:91:
9d:ef:0d:ab:5e:52:2c:de:f7:fd:cd:77:7b:26:e3:
d6:0e:4f:ef:68:af:6d:9b:c4:ad:ad:c2:d6:87:68:
11:c0:d0:13:98:58:88:14:56:c2:e4:70:c9:16:54:
a2:d3:a6:d2:8e:60:0b:df:36:60:45:96:2a:01:c9:
eb:81:38:f0:8b:6b:5a:d2:15:f3:42:5c:64:33:c0:
26:b8:bb:ed:39:d4:4d:8d:7c:3b:ca:0d:5c:7c:7f:
47:b7:29:d6:7d:7c:6a:69:92:30:a3:9b:4b:34:ec:
f5:0d:75:ac:5e:e5:d7:2b:62:4a:84:17:24:36:52:
7c:be:89:19:b2:67:1b:be:b7:a1:df:1d:de:df:24:
40:ab:47:28:da:8b:51:f4:c4:dd:1a:3f:2a:d8:90:
dd:c1:35:e3:b5:3e:c0:05:b4:5d:63:6b:f6:d1:f1:
05:f1:13:49:95:b8:d8:b1:2f:b8:ad:00:03:29:d9:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:91:7A:C6:4E:B7:7A:3D:C0:47:0C:3C:BC:C3:C6:DE:50:31:1D
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:70:e6:9a:66:66:60:19:45:69:ca:e2:bf:51:ce:2a:fc:
de:ff:f2:08:70:85:83:0b:e9:ac:51:30:82:ba:17:a6:9f:ee:
72:2d:0d:f9:e9:4b:9a:4f:9f:64:f2:1a:46:06:2c:e9:7f:3c:
bf:58:dd:67:39:f5:33:01:d8:a5:58:a7:a8:f5:71:6d:9b:ba:
3d:03:42:3f:01:37:c7:a1:ab:5e:55:43:a5:dd:87:38:45:7f:
8d:96:e9:54:f9:13:ec:39:38:7e:42:52:32:15:66:a7:28:41:
6c:81:e5:ae:71:60:20:0d:7a:a0:bd:51:34:c0:30:a5:a2:a9:
fd:18:15:bd:71:b5:b9:80:cc:ce:25:0c:28:49:73:8a:5f:97:
a4:86:a8:d2:b5:b5:09:11:70:3a:e9:13:b9:32:4b:3d:3c:e1:
ff:04:c8:82:77:d9:1d:8f:67:fa:eb:3e:08:0c:e3:7f:12:c0:
e6:a4:b7:e1:a3:cd:66:3b:16:10:c6:8f:55:a9:66:fd:4d:cb:
31:76:01:62:65:94:ad:93:be:85:27:8c:c8:86:dc:c3:31:87:
71:c1:01:c2:54:1b:49:05:de:c0:2c:cd:2c:d5:ca:b3:24:22:
f5:5f:43:2a:4b:1c:b1:c0:c0:86:81:35:6f:a9:25:af:f7:e2:
39:b1:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:17 2025 by rpki-client