Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: EDHvn12glklXvHuQ9vtYnBaQH0HD3iQpQAfnBcSCJ4g=
Subject key identifier: 98:9D:20:19:59:6C:26:80:4E:0A:32:1D:AB:52:6C:14:70:37:7B:14
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 01992330DEE574D49E09E71E964E8FE60E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 1381
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: L2/Z6E+ohOD0PZTgymmpmTRVJk76RdBlatRqgFXAI4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:de:e5:74:d4:9e:09:e7:1e:96:4e:8f:e6:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=989d2019596c26804e0a321dab526c1470377b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:69:db:af:85:b3:cf:9c:e3:21:3a:17:fd:
82:22:4c:c7:06:45:d1:4e:8d:83:ef:19:8c:d0:ab:
41:2f:24:29:9a:92:92:62:26:78:9a:5b:32:d2:5c:
6b:98:96:bc:92:64:e4:b1:0c:d0:5f:01:6d:1a:14:
70:b5:c9:c5:da:10:3c:c5:a5:16:1a:ed:36:d5:ea:
b6:fa:f5:98:62:e6:9f:40:23:92:ee:f8:60:ff:71:
88:aa:d6:11:a8:f2:c8:34:b1:15:a5:9d:ee:e6:00:
6a:b8:a3:70:1c:67:68:fa:17:4c:2c:08:c3:ab:24:
fa:c8:3b:e3:ae:16:69:aa:e5:b0:38:d2:8f:fe:b3:
3c:35:4d:0a:a3:ea:5a:8f:b4:e9:cf:ee:65:d6:73:
b0:8c:f6:13:7b:b6:6a:d0:39:d3:85:85:06:f6:7c:
71:43:2f:74:e3:96:a8:a0:32:d0:d6:67:d7:52:f9:
f7:32:03:b2:8a:b0:d1:2b:bc:e3:0b:ca:39:bc:11:
96:c3:14:7f:32:d1:e2:c7:92:9d:02:95:dd:26:51:
fd:80:47:17:24:98:85:3a:9f:db:81:b4:5b:d5:c7:
62:30:56:f0:a2:3d:28:87:93:8b:ba:c9:6e:cd:ff:
18:4f:16:a6:c3:65:8c:ae:d4:16:2f:bb:e6:54:85:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:20:19:59:6C:26:80:4E:0A:32:1D:AB:52:6C:14:70:37:7B:14
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:aa:99:a6:53:42:5c:e5:c4:0a:56:f1:5b:76:2b:a4:de:11:
d2:6f:6a:dd:88:7c:61:2e:3d:04:2b:42:b6:9a:f8:73:ca:2b:
77:c2:65:da:a5:9e:ac:fe:1c:4d:b1:39:2c:18:d0:43:52:3d:
15:fe:46:aa:0b:21:e8:39:c2:9a:6a:8c:4e:c0:7f:d1:09:c7:
33:53:8e:48:e3:19:db:13:0f:2a:58:a7:dc:35:e5:4a:32:a4:
75:1e:ea:11:b8:89:d2:a0:85:3c:ef:4f:44:e8:45:43:3b:4d:
fc:12:a3:ca:6b:c4:67:b2:51:08:cd:aa:48:0a:4e:e4:d3:86:
d0:7c:bd:69:c1:0b:fc:b7:88:a5:f4:f4:cb:ff:73:de:9d:bd:
d3:d0:41:06:23:72:43:28:ea:d7:7a:1b:49:9d:94:23:d4:57:
4b:08:02:dc:92:f8:d1:23:c0:ed:9e:c7:05:b1:23:26:fb:54:
c1:89:8a:e8:48:3c:22:1f:c1:bf:b7:60:d2:94:93:ad:d3:80:
fb:b6:25:78:5f:ba:a3:64:b4:40:fb:79:ae:b9:4a:5c:77:39:
c4:53:0e:c9:4e:af:02:e4:70:5d:bd:80:3e:d6:d4:10:a7:27:
df:01:e9:8a:6b:7a:d9:d2:1e:b1:94:dc:9d:10:13:e9:97:13:
44:a9:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:22 2025 by rpki-client