Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: 630a3WcHYLE3qPOouheZCF0Wjgt6fnAgjuRJcn4AA6U=
Subject key identifier: 0D:EC:F5:3A:F4:BA:37:F5:B6:F1:90:1D:58:BF:72:CF:E8:57:A2:84
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 0199225531A1A316B7B6C98E7F2D359A7298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 041F
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: DHgtqW4+48IfWqWVQWJzYk80dHySuA24x0vaEj1ciFA=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:31:a1:a3:16:b7:b6:c9:8e:7f:2d:35:9a:72:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=0decf53af4ba37f5b6f1901d58bf72cfe857a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:58:91:bf:ea:86:56:d1:46:37:c0:e0:d6:
db:39:9c:1c:23:60:c0:b6:e3:f1:5e:bd:1c:d1:7f:
44:45:19:65:8b:a2:1e:96:ed:15:88:91:96:26:5d:
a4:d8:8c:f9:d8:2b:d9:16:04:d0:c7:7e:87:45:67:
17:81:b3:65:e8:8d:f7:8d:6c:b4:15:2c:bf:ba:0f:
e6:2a:34:cc:f9:24:cf:a3:e9:cc:a8:81:fd:3f:d3:
8b:d4:41:f0:37:c5:6f:c5:2a:f7:5a:2e:de:81:3c:
5f:66:89:b9:be:bd:0e:12:f3:25:7b:6c:95:a8:a0:
29:57:ab:e3:fc:33:0f:68:74:22:87:5e:97:90:19:
68:f3:50:0d:ab:51:24:3c:be:37:ad:49:11:2c:13:
9a:fa:c7:81:18:11:bd:e7:04:17:5f:fa:43:87:33:
93:f9:9f:79:69:01:b8:ee:5f:da:1f:55:d1:11:9f:
1f:6e:90:f7:d5:8e:d6:86:74:f3:91:8a:74:7a:28:
6f:0c:27:40:d1:2b:06:82:4d:1b:58:0d:39:f0:24:
60:69:77:94:98:ad:2d:bc:a2:fc:f9:14:45:67:03:
1a:82:63:10:fe:84:48:d9:b4:fc:31:54:d6:35:34:
79:5a:44:48:63:ae:a0:eb:c2:3f:dc:e1:62:46:0d:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:F5:3A:F4:BA:37:F5:B6:F1:90:1D:58:BF:72:CF:E8:57:A2:84
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:f8:c7:cf:d1:63:a1:09:e7:93:3d:01:07:f1:74:a6:1c:
3a:72:77:5f:5f:5c:a3:92:06:b1:8e:64:e7:0b:53:00:0c:08:
39:f6:b0:fb:26:2d:17:8d:f3:ab:6c:d2:59:6c:03:20:db:69:
85:51:d4:02:c1:75:a9:cf:b8:03:57:8a:f9:79:24:7e:14:9f:
7c:9e:0f:62:80:f6:78:ec:41:f9:10:97:3b:c0:65:f4:d8:1f:
a7:17:75:17:f8:b8:7c:72:c5:83:cd:59:7c:7b:f1:b2:95:3f:
73:f7:b0:f4:d6:65:2d:86:ad:5e:0c:6a:de:83:5d:78:e9:ac:
24:5e:28:71:68:2d:84:a9:a5:5d:0c:8f:7e:0e:fb:5e:9a:b4:
11:94:21:d2:43:e9:f6:96:c0:b6:3f:2b:8e:65:1e:92:7d:1b:
18:41:a0:4d:bf:74:e5:14:9d:ff:37:77:fc:33:a5:5e:f7:80:
47:2b:65:f0:88:e2:7d:d9:fa:dc:43:2a:8f:c5:12:04:fa:23:
e4:05:93:14:cb:52:fd:6e:6a:34:12:70:bc:6d:9d:d3:52:fc:
b3:30:e4:e8:3e:e6:96:52:14:bb:e2:4d:89:d8:24:56:8e:25:
bb:33:c3:ea:e1:c5:b9:9b:f2:bd:d0:cd:87:b3:21:6b:94:47:
54:78:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:58 2025 by rpki-client