Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: W6sgxproneQqYo4QUmAaCwKxz4vC1ZKcqQJXAuR21bw=
Subject key identifier: AD:59:CF:CE:66:93:58:22:51:9A:E3:1C:46:DA:DB:18:3F:FA:64:D8
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 019922FAE39CB3BEDED21966925E39F7A092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 1544
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: BEXSPTvYeP1aTCFRiJsiWxz7r9a8VckSvseCJkwAf0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e3:9c:b3:be:de:d2:19:66:92:5e:39:f7:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=ad59cfce66935822519ae31c46dadb183ffa64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:ab:18:90:2c:00:f7:84:51:58:d2:f3:12:
41:5b:a3:bd:69:d3:0a:02:0c:dc:1e:78:34:ca:a8:
ed:6f:53:57:3f:39:79:39:55:56:bd:d2:90:a1:ce:
32:5c:49:1a:be:4f:1d:04:74:27:f6:a0:1b:56:9f:
68:ac:b5:7e:49:c4:b1:b0:b0:0f:b9:17:7d:ea:4e:
19:3f:4a:89:89:b4:a0:97:eb:b1:5a:47:43:e1:0d:
61:dd:66:e5:84:93:88:57:0d:3c:e1:4a:51:6b:97:
0c:2b:06:79:7e:63:ea:4e:e2:b6:af:97:a7:a1:77:
4a:dc:c0:c5:b5:d8:e1:7b:30:56:22:04:12:8d:35:
23:fc:b0:79:9d:8f:01:ce:7e:ad:32:ed:89:e1:ba:
45:4c:e7:12:6c:0c:19:18:8f:58:f9:05:f3:df:03:
b3:3d:58:9a:00:f9:04:42:a8:08:98:b1:de:b8:82:
1f:61:aa:56:3e:50:80:37:16:f4:dd:33:0b:1c:e5:
df:b1:9c:03:47:b5:2e:01:e5:03:b3:b6:5e:92:ac:
c9:25:fc:31:49:b3:51:52:7b:86:c4:af:57:0f:62:
34:fe:dd:f8:e8:c5:ac:6e:58:a9:47:88:0d:4f:86:
8c:03:2f:f1:32:78:e7:36:d3:22:eb:b7:5e:c9:0b:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:CF:CE:66:93:58:22:51:9A:E3:1C:46:DA:DB:18:3F:FA:64:D8
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:fe:79:7f:c5:80:fa:e8:dc:54:a7:5e:a9:74:e8:6c:81:
ca:cc:80:da:ca:13:64:67:aa:06:a8:8a:70:0f:aa:01:3d:db:
dd:88:3c:d4:44:1d:74:45:a5:ee:00:99:d0:18:d9:55:7e:83:
3f:37:a0:0c:66:e6:a0:3a:54:84:d1:ed:c6:e7:9c:e1:b3:0f:
65:4f:4e:ed:2c:7d:78:59:72:10:6d:dc:61:d9:a3:11:d6:d4:
38:e4:f0:41:25:cc:2d:2b:8e:bf:aa:78:f9:a7:3f:c3:d2:4f:
82:53:80:64:3b:6c:6c:e3:1a:c4:70:f8:46:e3:46:64:a5:a0:
b8:06:20:17:92:68:46:71:41:34:4f:ab:61:d6:3c:6b:db:47:
29:93:1d:d2:cd:35:56:74:e1:df:85:e0:26:1c:75:5e:60:1e:
4a:8a:b2:ab:8e:11:8a:9b:06:1f:0f:d1:41:d9:26:6d:ec:9d:
21:81:90:fe:c1:19:d6:52:89:ec:be:8e:40:15:11:cf:a0:c0:
70:dd:f3:31:b1:ca:3c:ba:b6:8e:9c:2e:7a:31:ea:a6:7b:b6:
02:70:96:84:8f:61:c5:28:33:ee:db:4e:56:28:4e:5d:b5:34:
36:d9:87:21:83:ca:db:2f:a5:d5:22:31:6b:1c:d5:d8:39:79:
d1:7d:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:55 2025 by rpki-client