Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: XqKt5Rjhv4Wmd3IOiAweBsOuAZzLUsqN9Ygh7+d1KMc=
Subject key identifier: 8A:C6:CD:62:E4:A6:2D:65:0C:63:01:86:21:E1:42:D9:AB:56:DC:A2
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019933EE118CB291B5136ADD6FE64297DBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 1261
Signing time: Wed 10 Sep 2025 14:01:04 +0000
Manifest this update: Wed 10 Sep 2025 14:01:04 +0000
Manifest next update: Thu 11 Sep 2025 14:01:04 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: kgBTqZaTOMSYfN7bq5r4/uaDSruoagdpedHun4tkqv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:11:8c:b2:91:b5:13:6a:dd:6f:e6:42:97:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Sep 10 14:01:04 2025 GMT
Not After : Sep 11 14:01:04 2025 GMT
Subject: CN=8ac6cd62e4a62d650c63018621e142d9ab56dca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:9f:fe:15:eb:82:10:34:8b:a7:44:6b:6f:
79:d3:1f:fa:12:0c:3d:64:de:4e:47:f7:07:55:d5:
23:f0:cb:c7:f4:d7:4a:31:bf:af:38:dc:63:bd:95:
50:d8:c0:57:98:e8:2a:b4:8f:0b:c5:61:fb:74:b9:
18:f7:c0:77:75:80:77:6a:a7:ad:39:c6:83:12:39:
46:d4:98:f0:19:74:93:02:fc:c6:1c:e9:1d:7d:9e:
d6:d8:29:b0:20:e0:b6:53:47:51:2d:9b:36:23:f7:
12:9a:b8:4e:2f:1e:52:cb:ab:e0:cd:96:12:2b:a2:
7b:e4:e1:4d:b9:fa:03:bd:77:1c:5a:09:c2:65:5b:
1b:d8:a2:7b:df:53:48:67:00:2d:b5:81:8c:c0:18:
6c:bf:a2:e9:b5:77:95:20:08:2e:c0:7c:d2:df:e0:
97:0a:db:60:2f:9a:dc:fc:17:62:08:ed:e7:48:f2:
1d:28:5e:ca:6e:2a:29:81:01:50:65:98:31:cc:28:
b7:f5:19:97:1e:70:c9:67:b2:e9:5a:05:fc:c9:58:
cd:0e:fb:8c:d9:9d:34:00:7f:38:f6:c8:35:00:74:
fa:86:09:a4:89:94:ce:98:4b:eb:1b:a5:20:ea:b8:
2b:75:f2:e3:e8:0d:cc:62:36:c2:d1:29:55:eb:f2:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C6:CD:62:E4:A6:2D:65:0C:63:01:86:21:E1:42:D9:AB:56:DC:A2
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:4a:d3:11:c9:34:5d:20:ae:2f:82:b7:05:b7:4b:40:9b:
ae:60:5f:f3:c8:ca:98:f3:39:53:d8:e7:83:ef:71:58:8b:76:
77:af:5c:ca:a6:1f:80:e1:de:6c:8d:d0:be:dc:34:56:a0:f8:
8a:54:89:99:2c:b4:d5:ed:b3:ae:02:0d:a8:8a:09:c4:c4:51:
2d:ec:26:30:a0:54:43:02:b0:d9:a7:cc:4b:93:b3:7d:cf:11:
b2:d8:6f:92:c5:67:65:0b:35:67:55:fe:31:5c:0d:9e:6d:ae:
ef:e2:ab:3a:97:97:99:a6:77:4c:82:53:89:c0:4f:d6:fb:de:
c4:e4:2a:6f:72:24:c8:e6:43:97:8f:8e:8b:89:ec:92:46:f8:
0e:00:63:a1:96:a5:2d:ff:e1:ae:20:f7:22:48:d0:f2:5a:15:
10:d8:43:e4:1a:b8:1e:3b:7e:41:a5:ec:af:e9:a1:38:9f:42:
96:ad:da:71:83:3f:41:29:d2:17:c9:40:b8:6a:d2:5b:fa:e5:
97:fc:f2:79:27:b2:53:27:3d:4d:28:0b:c3:02:91:d8:91:a3:
0c:68:5d:27:44:70:45:f9:37:d2:37:b6:94:9e:02:e9:6d:8b:
b1:4b:5e:11:27:01:7f:2c:26:67:43:17:c7:db:d2:51:8f:2b:
30:84:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:59:21 2025 by rpki-client