Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: wrtfmSIeolY+U7uEcp1IJLpTSo05Y0DPMiPkaoDAL5g=
Subject key identifier: AC:4B:1A:31:70:A8:FE:D9:0D:A8:E7:80:9C:99:2B:D6:28:D0:06:01
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01992CD93B604FEEDFC81DF0E56122EDBE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0AE1
Signing time: Tue 09 Sep 2025 05:00:57 +0000
Manifest this update: Tue 09 Sep 2025 05:00:57 +0000
Manifest next update: Wed 10 Sep 2025 05:00:57 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: 93udfVEWsnIfOJPDicJmfLfFAuOX75NpxwlEnfR+XOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:3b:60:4f:ee:df:c8:1d:f0:e5:61:22:ed:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Sep 9 05:00:57 2025 GMT
Not After : Sep 10 05:00:57 2025 GMT
Subject: CN=ac4b1a3170a8fed90da8e7809c992bd628d00601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:2f:e5:a5:5c:ca:dc:59:1c:1b:8f:dc:07:
e3:27:17:78:93:57:fe:9e:67:07:37:ef:70:8c:02:
c6:b1:e5:cd:e1:aa:ac:22:44:4c:1d:c5:56:20:d2:
5c:92:3f:e2:1f:21:4b:79:22:a7:fe:bf:ca:84:ef:
2e:2f:d7:87:cc:3e:8c:5f:11:6c:26:cf:fe:10:28:
74:45:1f:41:3d:cd:c8:a9:ca:ab:03:6f:13:be:1b:
f0:67:65:f1:02:69:9d:e7:b0:b6:a7:38:10:ff:12:
2a:f5:96:85:85:fc:03:6a:3b:ff:83:2b:b9:14:e3:
54:cd:de:3b:9a:1c:cc:a2:de:f7:bb:b1:aa:d0:69:
58:fa:d1:3c:f9:89:21:a4:05:49:d1:a3:68:9c:16:
dc:0a:09:15:d6:e6:0b:17:3f:a7:c3:66:96:50:8f:
0d:0b:8c:4f:e6:e2:da:6d:2d:50:25:41:e6:83:98:
71:ad:67:e9:a6:12:1a:52:d7:85:ce:2a:59:62:fd:
00:f7:4d:40:cd:ff:5d:65:d8:f5:5a:8e:5d:e1:a3:
36:36:f2:4d:9d:7c:55:53:ad:75:b7:8f:ea:9a:21:
69:70:0c:7e:19:78:09:e0:4a:2a:46:ae:4d:ec:f8:
78:d1:81:fb:37:9e:42:30:6e:82:3f:8e:a3:64:9e:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:1A:31:70:A8:FE:D9:0D:A8:E7:80:9C:99:2B:D6:28:D0:06:01
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:e0:6b:9e:69:53:ff:24:cc:16:2a:12:37:25:32:6d:e4:
cf:20:b8:7d:12:98:b6:b9:62:59:61:c1:93:ef:c5:e7:32:e5:
d3:37:c8:60:4c:32:fd:32:90:39:38:fe:60:3e:9d:26:f1:fd:
08:19:f7:09:0f:fe:9e:b2:81:47:a0:ab:fd:8c:78:4d:01:1f:
55:38:06:f6:ac:b5:84:35:0f:19:4a:69:22:3e:23:7b:bd:c2:
2e:2d:21:6c:a4:13:a4:48:1c:79:b9:96:88:11:45:49:d6:75:
a9:44:a9:75:a7:42:be:ca:79:24:eb:cb:60:6b:09:8f:97:4d:
2b:cb:fc:06:c0:4f:e2:6a:53:84:02:9c:e4:1d:5d:77:d0:d5:
64:6b:76:3a:90:a3:06:f1:39:53:f9:c8:b6:2f:a6:18:2d:70:
0f:eb:7a:95:ef:69:e9:56:bc:5c:23:8e:32:56:b5:d7:fa:16:
50:e8:ce:6b:25:a0:ce:87:c7:88:97:cd:68:e8:c3:c3:cf:2b:
e0:6d:3c:40:e3:37:3e:fa:25:fa:d4:77:9b:3a:b5:89:ef:b1:
4a:02:d2:c7:77:a3:29:3d:25:93:83:60:5a:4d:5e:90:29:49:
8d:fb:c7:d5:bc:1b:57:39:1b:b7:33:dc:62:c4:4e:21:32:3e:
6f:7f:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:32:14 2025 by rpki-client