Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: epdMEhK6V/zXekjnZpC6aEwFSW5UjOnghvZRrxoiMKg=
Subject key identifier: AE:4D:4C:DD:63:90:10:1D:F4:B5:85:3F:6F:88:14:81:AD:DF:91:E3
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01992B58B11A654E13F1C023CD7253ED86C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0CF8
Signing time: Mon 08 Sep 2025 22:00:56 +0000
Manifest this update: Mon 08 Sep 2025 22:00:56 +0000
Manifest next update: Tue 09 Sep 2025 22:00:56 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: NyDDjCQWVboawhV31GlZnKSj4JFu/eNb70oKTlPTL9k=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:58:b1:1a:65:4e:13:f1:c0:23:cd:72:53:ed:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Sep 8 22:00:56 2025 GMT
Not After : Sep 9 22:00:56 2025 GMT
Subject: CN=ae4d4cdd6390101df4b5853f6f881481addf91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:b4:fa:e1:76:f5:9e:a1:2f:7e:0c:60:ba:
6e:d5:d0:0c:b6:84:bc:0d:c4:cb:eb:8e:b7:57:4a:
61:ad:12:db:e1:6d:78:f6:ec:49:00:ee:3b:e5:05:
22:19:72:ce:0f:07:93:1d:f1:20:7f:c6:fd:04:30:
83:b2:8e:fa:7b:04:44:bf:7f:d0:54:98:91:0a:e2:
f3:d6:52:a6:0a:65:21:e7:46:87:b1:c3:36:68:04:
c4:e8:20:fd:86:a1:bd:4f:9a:81:e9:06:f6:a2:f3:
52:6b:2e:e5:29:94:fc:9f:29:4e:bf:65:64:2d:a5:
a3:ad:ea:15:f7:53:ad:d5:f3:39:cd:1e:b0:a3:a3:
55:14:0c:59:54:8b:31:df:c8:b5:13:e6:48:64:bb:
81:15:8b:89:16:21:9a:99:e7:0d:b8:43:b2:54:2c:
d2:83:a1:82:62:7b:21:ed:6c:16:72:01:32:56:f4:
e1:d4:6f:b5:67:70:05:49:29:30:5c:89:80:05:67:
8f:47:29:50:36:48:85:f3:aa:82:7f:92:56:3a:88:
af:85:42:09:7d:04:1f:b9:19:6d:72:73:b0:8f:0e:
1b:73:c0:47:d0:54:8a:b2:f4:3d:ea:fa:50:9d:c6:
b8:cb:ce:78:41:50:d9:b5:c7:fd:35:41:0a:18:23:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:4C:DD:63:90:10:1D:F4:B5:85:3F:6F:88:14:81:AD:DF:91:E3
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a0:79:9e:26:b0:ad:79:6c:36:a4:ed:60:e8:34:b5:2f:40:
8c:cc:71:14:4e:b7:8d:19:ed:26:ae:c8:8a:4f:80:f4:58:bf:
e0:be:61:e1:60:ab:7f:8a:b1:27:71:df:3b:a3:cb:1b:58:65:
12:d1:d5:f8:f2:88:a3:6f:d3:41:37:f2:ed:12:54:b3:8f:32:
76:42:d2:80:23:68:f3:5f:fb:3e:6c:98:c9:56:82:92:01:d4:
7f:69:34:1a:fb:4c:98:0e:11:6a:42:14:eb:32:37:b7:e6:94:
d6:b9:8d:93:32:f2:71:05:e3:f7:7b:2c:a8:a6:76:59:df:c2:
ab:c6:54:da:da:2b:c6:0f:4c:e5:f3:6d:e1:7c:bf:4c:62:81:
2d:f3:23:89:50:0b:6c:da:72:5f:a0:d8:c3:6c:08:07:0e:10:
5e:7d:98:a3:9f:c8:c3:47:ea:10:1b:87:a2:fe:b8:50:4d:7b:
58:19:9a:86:40:25:23:eb:fb:cc:74:53:19:fe:9f:69:8c:13:
53:f9:f6:c9:03:2d:e1:2b:6e:2f:87:83:bc:d2:61:09:ae:55:
0f:9d:89:ac:04:49:df:66:87:9a:42:09:b2:41:13:91:9a:9c:
4e:49:6b:0f:cf:d7:94:ff:6e:8c:6b:19:b2:68:89:74:34:23:
83:fb:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:47:53 2025 by rpki-client