Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: l4Ww7RfUbqh1xxnop9BV63BjGIACqdaNfznTi0gg9LU=
Subject key identifier: FC:3F:B2:CB:23:48:2B:DC:45:AD:89:D1:4E:6C:BD:26:B5:9B:1F:E0
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019922C3378027F75CD7609FA726801DCA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 07E5
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: iwIAJInfgVrI2FA1tAcrB0Ft2qJ0PqoY4isAocEMkFo=)
2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:37:80:27:f7:5c:d7:60:9f:a7:26:80:1d:ca:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=fc3fb2cb23482bdc45ad89d14e6cbd26b59b1fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:7c:43:eb:1b:da:05:2b:72:38:e9:30:95:
d0:18:65:bf:bc:d3:8a:55:1e:60:8e:ca:b8:c9:d4:
cf:2a:dc:42:2e:3d:c1:bf:12:f6:19:c9:bb:98:fe:
f6:d3:1e:0f:58:66:03:18:99:1e:f8:47:73:38:68:
4d:ea:66:67:b9:ea:e6:cf:62:b7:9c:ec:dc:0e:4b:
84:65:f0:bf:42:66:bf:99:dd:fd:be:39:35:44:52:
a7:bb:f7:8d:a7:1e:3a:9a:b4:84:2d:8c:d4:e7:33:
3e:13:f3:a0:80:d2:20:ca:04:a9:6a:4d:88:0f:2c:
4c:b1:5c:ca:aa:3c:2a:a9:85:79:75:d8:40:d1:79:
0b:56:3a:d2:e2:cf:51:8f:a3:bd:56:23:a8:20:a6:
07:a7:0e:61:5c:94:5d:cb:95:f9:77:22:18:49:44:
45:7f:46:95:14:f1:97:82:a3:21:5d:e4:28:7c:7a:
27:d1:ff:a2:1c:da:ec:59:7e:b5:dc:18:de:83:c3:
51:96:95:79:0b:d8:83:dc:b1:05:31:9c:ac:b0:77:
a9:77:10:df:af:ac:25:13:64:81:68:51:b9:2e:f9:
c4:a3:da:0b:8e:7a:eb:47:49:68:c4:f1:e9:d5:b0:
ea:c8:59:8f:b8:8c:8c:91:db:03:04:33:4a:30:d0:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:B2:CB:23:48:2B:DC:45:AD:89:D1:4E:6C:BD:26:B5:9B:1F:E0
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:88:4e:b6:4f:3f:56:7d:f5:09:5b:08:5b:d7:8d:6c:cd:
22:28:29:d6:66:ea:1d:4f:e3:9d:1a:e2:e2:87:4b:1c:af:f3:
2f:66:f1:c1:73:e1:1c:61:f5:16:c4:aa:01:1b:94:9c:56:c3:
46:a3:b5:82:3d:2a:56:b4:82:1e:50:7b:e9:a7:90:77:3d:13:
fe:fb:5e:6b:0d:cb:87:9b:aa:85:44:c1:69:eb:30:5a:c7:2a:
9c:c3:1e:bd:4a:3d:fb:6d:c2:48:ef:e6:ae:0e:49:ec:05:91:
e4:9d:a3:2c:1e:e5:36:4a:40:cf:84:ab:f9:1a:fb:a3:e8:bc:
01:c9:15:5a:43:b7:cb:3a:b1:b6:e1:dc:dc:72:de:3e:ac:80:
8b:d6:5a:2b:fb:bf:e3:e1:48:a2:ec:a3:48:04:51:bf:92:61:
b7:d0:38:15:63:c8:66:99:36:43:9d:e6:c0:fb:07:70:dc:c6:
cd:d2:32:e3:94:0e:b4:40:0c:10:68:61:1c:27:f2:7a:b2:c4:
1b:6e:96:86:ff:d3:ef:22:de:58:44:b1:a1:3a:e1:05:2c:4a:
d8:cd:6c:71:fd:f2:a7:85:c9:f4:d0:1f:e7:0c:b0:fc:7d:5a:
d6:3f:01:55:63:e3:6c:f5:68:43:c0:0e:63:7d:57:71:d8:a2:
dd:65:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:07 2025 by rpki-client