Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: JIlb7SIbaFan/cpZwgD6+Q/J7jHV1keCaHiRgwxi/LE=
Subject key identifier: 0E:3A:71:82:6B:4A:76:62:1C:0B:BF:41:78:32:09:A5:F8:18:20:C1
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 019932A44EAC02C582992528960DEF88A5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 126B
Signing time: Wed 10 Sep 2025 08:00:52 +0000
Manifest this update: Wed 10 Sep 2025 08:00:52 +0000
Manifest next update: Thu 11 Sep 2025 08:00:52 +0000
Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: XCqS/ZJVInepZO9knDk4qNmchD1stqUDYn5rHUM1B7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:4e:ac:02:c5:82:99:25:28:96:0d:ef:88:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Sep 10 08:00:52 2025 GMT
Not After : Sep 11 08:00:52 2025 GMT
Subject: CN=0e3a71826b4a76621c0bbf41783209a5f81820c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5b:c3:6c:a4:7f:5d:f9:ca:fb:c8:43:f3:ea:
56:35:5b:28:58:37:e4:18:a1:7c:3e:6d:a4:ab:c7:
22:c7:86:ea:07:13:86:a9:f4:64:7f:62:09:04:e5:
e8:c2:c4:36:da:3f:38:24:59:e8:07:94:36:e1:bc:
40:45:ab:4f:90:7d:8a:dd:3c:c0:7e:85:fe:6d:ca:
71:8b:c4:dd:c1:a5:4a:ca:8d:a2:63:6c:be:64:ce:
da:d0:ca:ce:62:e4:06:5b:70:64:8b:7f:d2:75:42:
ca:03:4f:8d:2e:d6:47:b8:59:2e:9e:4c:11:7e:54:
95:c7:c4:fc:fe:2e:90:91:8f:c5:ce:40:ce:20:8b:
55:87:ca:25:de:fd:bd:eb:86:4c:8a:24:bd:0f:4b:
25:a4:4a:68:e0:ca:b1:a5:d5:72:b2:c0:74:e6:f6:
d7:37:95:44:6f:c2:13:b3:fc:f9:3d:d3:32:55:6c:
51:40:e6:8a:3e:37:9b:3e:77:45:d1:8f:f0:a2:c7:
44:75:4d:4e:40:a1:dc:8b:38:2b:fd:6f:50:fd:f6:
c8:6c:cb:bb:a7:3c:13:61:93:0a:77:73:d5:e4:55:
e2:6e:bb:fa:e2:c0:cb:d7:b7:48:64:f2:03:69:93:
2f:7b:c0:55:53:07:24:55:45:cd:17:48:9d:55:46:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:71:82:6B:4A:76:62:1C:0B:BF:41:78:32:09:A5:F8:18:20:C1
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:3f:2d:8b:e6:ff:87:d3:47:66:be:dd:7f:c3:42:ed:7a:
73:7c:55:6f:74:28:9c:b5:8b:9d:c7:22:52:af:3d:4d:81:0d:
f7:3a:a4:09:88:69:70:e9:7a:b1:fd:ef:06:f9:a7:6d:2c:31:
91:ab:90:56:b4:da:ef:a8:fa:e6:18:ef:0e:d4:fe:e3:97:07:
39:d0:b5:f0:31:5a:db:57:bf:63:36:62:2a:4e:69:a8:3b:5f:
1c:b5:65:1f:75:5e:8b:7b:0e:bc:55:d4:22:4d:d4:cc:3b:eb:
e6:21:6e:c2:c7:cb:5a:75:65:38:a0:69:30:c1:f0:c9:c1:03:
54:89:6d:46:d7:c3:a6:4c:d0:f4:d5:ba:26:60:e6:43:e9:6e:
9d:dc:37:c7:d5:85:c5:58:de:c5:c5:8d:a7:42:f1:b2:ad:e6:
0d:84:6d:23:83:0d:eb:c4:af:bb:f9:53:c5:4c:3c:10:15:21:
07:d7:bd:7e:49:d5:69:dc:e2:d1:07:47:d1:a0:7c:d4:1a:a8:
54:11:7b:52:d0:cd:a0:e3:71:45:26:db:eb:7e:59:a8:a7:83:
b2:4a:5e:59:56:56:5f:7f:55:c8:fb:31:a1:d3:c5:62:9a:df:
58:42:82:d8:b1:30:6f:4e:05:9b:4e:e0:cf:c4:f7:b8:9a:07:
77:e1:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:07 2025 by rpki-client