Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: oBwwB95YxvyzQgsi3MNO6hb4M3HxJHIOvPklR2RPOiY=
Subject key identifier: A9:FE:2C:EE:FF:A6:CB:6A:26:E3:86:9D:34:D5:30:AC:97:C2:E8:E1
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 019922FAD415D303FBE43EC52BEB3AC3DF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 044A
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: bKGoNzdFipAWevxBZbmsQP85J5RufDcBpHMdhYJZsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d4:15:d3:03:fb:e4:3e:c5:2b:eb:3a:c3:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=a9fe2ceeffa6cb6a26e3869d34d530ac97c2e8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:78:b6:42:18:ef:e9:da:4f:2f:2f:6d:65:
c9:10:7f:45:76:c1:9a:e6:b9:0f:7f:32:85:5c:de:
4e:5c:a8:34:78:1e:60:44:05:28:5f:80:9a:ff:2c:
ad:67:81:89:26:10:56:3e:6b:b9:f8:77:cb:1d:f2:
a5:dc:80:a1:f0:35:1c:dd:90:f5:39:9d:3b:de:69:
94:d9:53:b4:ee:0f:c7:b2:88:ef:47:92:af:97:a1:
f4:eb:20:09:84:8d:0b:9d:fe:38:b8:d4:f2:48:8d:
20:15:53:bb:37:5c:cb:fc:03:40:40:4c:75:14:6f:
a0:b9:ef:5f:37:e3:8d:54:2c:15:0b:b2:76:07:7c:
3a:74:7a:58:19:4e:51:d2:2d:9c:f1:94:75:b6:8e:
0f:1a:1d:89:a3:8c:0d:db:16:69:f1:f2:51:45:88:
97:61:0a:12:09:7a:66:bf:9b:4c:c1:d6:56:3a:8a:
4b:03:41:35:c4:7e:05:f6:aa:2c:bf:74:f6:ce:35:
6c:93:f9:7b:36:d4:87:0c:24:87:7e:aa:ac:72:69:
41:3d:e1:ab:39:88:50:b7:d1:65:2e:b9:42:40:45:
6c:bf:e9:89:5d:dc:44:6e:0b:56:4e:a0:5d:d0:f5:
86:2e:b2:67:0a:72:24:44:b9:e4:b9:79:b1:fe:58:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:2C:EE:FF:A6:CB:6A:26:E3:86:9D:34:D5:30:AC:97:C2:E8:E1
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b2:4f:49:c3:b7:45:12:ec:03:95:a4:9f:6d:3b:81:1e:f6:
38:0b:6b:5d:34:d9:78:b1:50:ba:a9:04:be:ad:28:a6:ff:7f:
4d:8b:e1:43:3c:95:e8:94:1c:95:2c:e1:10:21:fd:71:ed:5d:
ff:9a:15:5a:ae:98:09:7b:4b:0f:ff:f7:66:11:fb:3d:53:d3:
52:ad:52:e2:13:82:a7:a7:cc:55:af:02:fe:f1:de:66:65:a1:
ce:86:18:0c:76:bf:07:a3:9a:8d:e0:82:81:b4:c5:b2:6b:8d:
6b:b8:16:44:4a:f4:7c:c6:1a:46:66:03:c5:58:df:34:e1:e0:
e4:0b:eb:18:18:5a:36:3a:54:39:43:e7:76:91:36:4d:f1:1d:
d8:5a:7f:45:b4:db:da:ee:96:e8:bb:84:9e:48:36:6e:7a:c7:
99:23:c1:6c:88:3b:e7:05:8f:f9:3d:2d:f0:7a:e7:ba:b5:9c:
03:cc:21:9b:02:61:76:39:ab:98:06:f0:29:b0:22:05:2a:ae:
7c:b4:fe:dd:bf:4c:e9:be:4c:f0:ad:e0:8b:1a:0d:fa:70:16:
11:e8:af:56:0f:90:8d:34:1d:98:53:c7:5c:22:38:ca:3c:95:
74:d8:3c:a6:be:33:52:23:a4:0b:d6:49:c2:1f:7e:5a:99:90:
95:b7:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:05 2025 by rpki-client