Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: NrsWAXwoc4WtaPflEQA4GTGnNY5smjj+QNvMTLZ4TzQ=
Subject key identifier: 93:9B:40:24:A8:93:B8:03:84:1F:A0:37:BC:45:D7:CC:B5:BA:8E:09
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01992E5A60E4B037037E18598FC9838971D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 12:01:38 +0000
Manifest this update: Tue 09 Sep 2025 12:01:38 +0000
Manifest next update: Wed 10 Sep 2025 12:01:38 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: PnQEjW5JNHNInZecxaJEM90Fh66PD/dyCCDlBawMiwg=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:60:e4:b0:37:03:7e:18:59:8f:c9:83:89:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Sep 9 12:01:38 2025 GMT
Not After : Sep 10 12:01:38 2025 GMT
Subject: CN=939b4024a893b803841fa037bc45d7ccb5ba8e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:2e:3f:16:ab:43:b9:0c:32:a9:94:26:fb:
bd:09:77:f3:ee:cd:7a:47:95:eb:96:82:26:50:de:
82:96:6e:e7:b3:71:1c:24:4b:99:c2:68:60:04:4b:
71:67:1f:9c:83:b5:0a:a4:3e:61:e7:0c:55:77:b2:
c6:64:64:ac:1c:8a:99:48:50:c6:57:ed:82:0b:0b:
30:06:a1:5d:fd:40:7d:35:b9:b2:c6:07:35:c9:2f:
44:28:cd:e8:5f:71:f0:90:e6:63:4f:5e:33:85:c8:
f9:b5:84:37:ea:7a:5f:4c:19:27:23:f8:5c:a2:20:
61:31:fa:d9:c9:c8:e1:de:1f:4b:38:b9:b2:13:01:
7a:49:22:34:e6:27:20:5a:7b:b3:19:ff:e2:83:86:
cd:41:94:48:67:56:0d:c1:af:71:eb:ef:ef:32:44:
4d:56:e3:25:ca:b8:94:a7:22:f0:df:4a:58:9e:b6:
66:ed:aa:fc:16:d1:e5:f2:e8:5c:07:db:e6:ac:a4:
e1:3b:69:b8:03:c2:ba:e5:5f:1e:63:b4:3f:49:ab:
78:b4:f8:30:bf:0b:f4:57:f8:03:5d:bf:ae:45:8e:
2e:6d:c8:87:22:26:6b:12:02:e5:e9:de:62:7f:cf:
b2:f0:79:1e:06:73:44:21:1d:9e:9b:93:2c:50:6d:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:40:24:A8:93:B8:03:84:1F:A0:37:BC:45:D7:CC:B5:BA:8E:09
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ad:39:a4:ea:86:62:96:bb:1f:78:8d:34:ea:ca:5c:89:ba:
a0:8b:23:2d:d4:fd:0e:33:93:9d:0f:01:49:e8:49:2a:56:e4:
b4:e9:4f:1d:bb:c6:38:87:52:c7:59:8b:8a:0c:ab:2e:68:7e:
75:24:c5:d5:53:42:21:78:65:b0:81:f9:e8:9c:a8:44:51:04:
63:1b:18:12:e5:d0:58:97:d0:4a:ac:47:2c:20:b0:f5:09:1e:
68:b0:b9:3f:e2:80:89:52:9d:33:91:5a:85:d7:b1:cd:15:2f:
59:8a:4c:f6:77:e2:b4:a0:55:4e:e9:93:5b:0f:db:35:ab:9e:
d2:9e:02:f7:2a:f4:81:c7:25:e9:50:06:34:55:eb:23:7a:d9:
9d:67:26:6a:94:01:da:dd:a9:60:46:9d:57:69:96:2a:7d:e7:
b1:5f:7a:b0:a6:0a:27:ef:43:ba:0f:73:5a:09:11:d4:67:ca:
c0:dd:63:32:30:b0:52:0c:a1:35:52:ac:3c:d7:69:ad:d9:0a:
87:79:48:e7:e8:d5:36:4f:dc:9d:6a:ab:d0:58:cf:79:03:c5:
10:73:77:a0:83:84:ca:ae:f3:bf:db:ec:3d:32:21:70:eb:cb:
c2:9d:d5:01:c3:88:0e:59:de:db:23:94:2e:2f:c7:1a:34:10:
8d:dc:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:01:09 2025 by rpki-client