Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: 5NHUND5uw8hNKf4Yb/0t0+1MoVFM/2/Uwmxk+2lO5ts=
Subject key identifier: D8:18:D1:22:63:AD:E5:83:88:18:1A:EA:BA:59:95:F4:E6:77:F5:38
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019922C3AB404AED5426F8D8E896ECC6B687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0D04
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: CaVklJPMTvNX2x0aAT9A2pMPqIpamnlbTKpJ+XAknFA=)
2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ab:40:4a:ed:54:26:f8:d8:e8:96:ec:c6:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=d818d12263ade58388181aeaba5995f4e677f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:16:52:8c:95:d4:35:e8:da:9a:d8:54:f1:
ce:3e:15:40:35:87:08:74:b6:72:fa:1b:65:a3:35:
8c:59:8d:7f:e5:ca:f6:e6:ab:7d:bd:b2:6d:c6:10:
35:98:92:f8:53:ca:0a:d0:3e:27:98:b4:a1:23:66:
2f:6b:a3:f1:38:ad:73:3c:97:d2:bb:85:3f:28:fa:
23:6e:be:18:2f:39:79:eb:8a:b6:62:f2:d8:39:f2:
37:0e:40:10:fe:12:92:50:45:69:d0:dd:45:cf:25:
18:5f:4d:15:7c:19:04:89:2d:90:8c:2c:85:21:72:
66:bf:7f:21:a0:70:16:82:d6:1a:97:54:c3:ed:16:
28:5b:50:19:ba:c0:27:af:92:94:72:f7:d2:52:a9:
3b:14:28:8d:1e:af:c8:1b:fc:4e:e8:d1:b7:67:4c:
85:5b:e6:6b:b5:8c:c7:1f:35:df:af:cd:1f:bd:d8:
d3:82:e5:76:93:94:92:38:82:06:68:d5:70:19:11:
5c:1a:93:c0:7b:42:c1:ce:66:a6:e6:12:6b:eb:0e:
a2:78:8a:10:8e:68:60:8f:97:95:be:9f:c7:24:73:
19:66:28:22:45:b0:86:07:c8:dc:16:65:5a:01:d7:
c4:5c:90:f2:03:74:89:30:e5:2b:27:bc:25:08:4c:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:D1:22:63:AD:E5:83:88:18:1A:EA:BA:59:95:F4:E6:77:F5:38
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:55:28:30:57:74:26:9b:2a:15:c7:af:39:e5:91:71:3c:c9:
2d:20:9a:27:04:b0:30:fe:b3:ef:de:d8:41:23:e3:03:8c:66:
bc:e6:ff:a9:70:8c:ad:57:21:06:1b:78:d7:e7:c5:94:74:3f:
6e:f9:b9:51:98:b4:8d:1b:87:7d:30:69:cc:63:87:e3:e0:64:
dd:58:65:4e:bd:0c:ee:3d:22:e2:b0:d2:a4:04:0b:af:d9:0e:
3d:fe:38:5c:e3:5f:d6:97:42:3e:6a:d7:4e:8e:59:9b:ee:ba:
73:ee:a7:ce:56:2e:68:06:22:31:15:e6:d2:3a:d7:57:a3:1d:
5e:cc:a7:49:67:7f:03:65:cc:c3:dd:08:9c:cf:da:22:06:33:
61:c2:45:53:8c:ad:cc:97:03:1d:77:0f:9d:d0:39:d6:5f:7f:
71:e7:f5:f4:bb:e2:21:47:bf:61:74:2d:39:e1:d8:ea:ae:42:
15:fe:52:8c:01:8e:25:78:27:d2:ab:cf:7e:75:0e:ef:ec:ac:
1d:ca:ff:d8:2c:c5:14:5d:28:f6:c2:d6:05:ab:d4:0f:ca:f4:
bb:a5:2a:6d:ca:e2:dc:15:52:a3:3e:46:68:f2:9a:32:d5:c3:
0b:6a:98:9d:5a:71:56:68:07:06:82:e9:ed:fa:dd:a9:67:ba:
d6:9c:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:31 2025 by rpki-client