
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: ALg8KI+4GPjrmmHCjv6gGPiy+F3GKfFteFz7BS9/yhU=
Subject key identifier: 8D:DB:83:D2:22:52:28:4E:C5:12:0B:95:C0:1E:1F:6A:70:9B:33:29
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 019923A0D25366BD47BD21571243B24FA519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0E3D
Signing time: Sun 07 Sep 2025 10:02:46 +0000
Manifest this update: Sun 07 Sep 2025 10:02:46 +0000
Manifest next update: Mon 08 Sep 2025 10:02:46 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: lTukz1DVIdYbVKCOtGb3EDbrLYGWk7I/UDJi8QmHiE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d2:53:66:bd:47:bd:21:57:12:43:b2:4f:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Sep 7 10:02:46 2025 GMT
Not After : Sep 8 10:02:46 2025 GMT
Subject: CN=8ddb83d22252284ec5120b95c01e1f6a709b3329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:f1:35:9e:cd:8e:01:96:50:5f:f3:ae:49:
14:76:67:40:48:b0:1a:c6:39:a3:8f:34:df:a1:27:
bd:8a:84:4d:46:e0:bc:95:39:43:45:84:6d:d3:69:
3b:99:76:ec:47:61:67:3e:ec:66:46:91:78:2c:2d:
e7:01:ec:d8:f1:4d:d2:25:b0:35:d1:e6:b6:9c:c8:
ae:9f:5d:cd:56:2a:8f:37:b0:94:1d:1a:de:86:0f:
cd:c3:7a:59:8d:ea:6b:ac:bf:cf:b3:f6:b0:de:a5:
73:55:9f:01:aa:d7:75:87:3a:b2:bc:4a:a6:33:ae:
40:9e:b2:b4:66:8e:71:50:a2:1b:38:d7:52:b8:1f:
7b:3e:57:02:6a:07:74:50:7f:89:0f:29:fe:c3:3d:
ac:52:3e:35:b2:01:d6:a2:d9:57:64:05:d1:96:17:
4c:17:11:e4:00:f7:2e:e8:49:65:be:0a:a4:f3:33:
65:42:85:7a:cb:6c:35:9b:5d:9d:ea:05:4a:f8:ad:
c9:75:96:5b:11:49:58:0a:3a:c7:6a:c3:2f:d9:88:
3a:51:d4:aa:b8:38:6f:be:09:35:fa:fe:e6:c6:a4:
41:1d:ea:a9:a4:79:32:1d:9b:55:77:18:02:62:c5:
86:50:12:43:93:da:be:8e:87:48:f7:1a:f0:53:08:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:83:D2:22:52:28:4E:C5:12:0B:95:C0:1E:1F:6A:70:9B:33:29
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c1:7e:1b:4d:2a:df:39:09:d7:59:6c:9a:ef:e1:6a:97:2b:
72:91:50:be:ff:54:6b:62:83:70:b0:1f:e2:38:c4:6d:dc:97:
ff:c8:6b:70:0c:ee:db:16:c6:44:3a:5a:a4:5b:c2:b1:d2:f5:
03:8f:21:88:61:43:d3:8a:c3:2d:a2:aa:18:d3:55:86:50:b7:
30:a4:67:ce:14:16:83:9c:ba:b3:76:e4:61:8a:ba:c7:53:90:
57:ad:43:4e:d4:3b:3d:12:51:25:30:6f:51:1d:31:3e:3b:8b:
b8:a0:6e:9e:cc:ab:59:22:90:5c:2a:44:e3:33:6e:80:4a:a0:
93:e1:b5:ba:71:0d:11:a8:68:22:14:c4:22:07:32:43:c5:61:
8a:c1:79:ef:b6:fa:59:e5:01:69:85:f9:1e:5d:2a:ad:1b:c6:
5d:f6:07:a1:c5:fa:34:07:cb:31:d9:0f:cc:b6:36:e6:8e:4e:
b0:88:fe:80:46:61:6f:50:2f:34:04:bd:65:55:f0:41:60:62:
9d:66:9d:48:c3:e8:64:5b:2e:4c:89:2b:8e:33:d6:ca:19:e5:
b5:07:fb:5d:f1:4d:4d:0c:8d:68:3d:bd:1c:fb:e1:1a:03:a6:
4b:1b:cd:18:1c:4f:a1:5d:74:86:f1:ba:d6:24:36:ab:57:fa:
ac:91:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:35 2025 by rpki-client