Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: WjdQclIGbIAqpe66UtCzdmpxkvi3lbVOM30D736r/k4=
Subject key identifier: 4A:0D:F1:03:67:1B:AD:DA:E2:F0:0E:47:CC:02:9A:82:64:2B:A0:0A
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 019916F6B003397FB15C3B75D428C1F3FDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 0ACC
Signing time: Thu 04 Sep 2025 23:01:29 +0000
Manifest this update: Thu 04 Sep 2025 23:01:29 +0000
Manifest next update: Fri 05 Sep 2025 23:01:29 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: fxcSwIFTaLwi/q/twtjbwQne11jClaoTVrxam4AV+GU=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:b0:03:39:7f:b1:5c:3b:75:d4:28:c1:f3:fd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Sep 4 23:01:29 2025 GMT
Not After : Sep 5 23:01:29 2025 GMT
Subject: CN=4a0df103671baddae2f00e47cc029a82642ba00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:5d:09:2d:cc:eb:64:e3:35:e4:58:59:84:
93:f6:46:34:f0:6c:f4:ff:cc:54:42:ec:a6:64:d9:
a1:75:0b:de:7c:b5:e3:8a:b1:38:44:82:17:41:a7:
68:7f:b9:bc:55:0e:26:13:53:48:f0:7d:a9:00:84:
75:ff:7b:5a:6a:3f:3e:e9:2c:f2:4d:c1:d1:68:59:
f5:ea:e1:2e:d9:5b:00:7e:43:0d:9f:71:f2:c9:d1:
b2:af:0d:41:96:e8:ec:45:bf:6d:ac:4f:5e:f8:76:
d7:d2:60:32:dd:cc:97:d9:f9:c3:82:3b:a5:7d:5c:
ba:05:3b:f8:36:94:a2:8e:a0:41:53:d7:cd:33:2b:
4d:be:15:68:6c:b6:f6:57:18:ce:19:97:cf:6f:8f:
f2:f2:bc:16:a6:7c:68:5b:0c:1e:48:5b:27:71:b9:
5f:1d:3f:09:f7:87:c2:f4:cd:0a:b5:f9:91:61:7a:
21:d7:ad:74:a4:b1:dd:cd:1a:f7:11:16:4b:ae:5b:
eb:99:cd:66:5d:61:44:30:c8:fe:0c:33:8f:e0:05:
98:e3:e2:da:90:44:97:df:61:05:43:e2:56:2f:07:
f1:f8:ef:ec:6e:e6:8f:c4:0d:0e:77:17:c5:32:ff:
ad:59:21:64:01:c3:e2:41:a2:5c:88:ea:74:31:88:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:F1:03:67:1B:AD:DA:E2:F0:0E:47:CC:02:9A:82:64:2B:A0:0A
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:f0:19:ac:31:13:50:e1:66:e4:e5:73:bd:e0:a7:ac:90:
b3:23:56:de:db:b1:42:75:89:01:6c:29:55:2d:02:7a:d1:23:
d0:ff:f4:62:58:d2:e8:f8:6c:b6:51:f5:d3:a4:f0:6e:d7:a0:
b3:32:44:6e:c8:bf:41:4f:19:89:97:c8:e0:f6:10:d0:4a:27:
9c:04:eb:63:ce:b1:5c:a3:dd:d9:d2:13:dd:60:99:f4:f2:d0:
8b:60:eb:3e:f7:58:35:c7:b9:6e:c7:01:2a:17:16:5c:66:c3:
fa:1b:34:21:3a:7c:6c:94:0f:52:20:d8:f3:2a:d4:23:b2:93:
f8:90:21:72:ff:7f:e1:c0:22:01:03:55:34:85:8d:1f:de:ab:
33:d1:71:ff:75:6c:ef:9f:94:20:c8:a7:91:f8:5e:46:ad:ba:
3b:f6:d7:13:ac:ab:b5:b3:4a:e0:84:56:91:a0:ca:60:44:4f:
b4:7d:2a:f1:11:db:9e:8c:49:a5:ef:bb:f0:f8:56:51:93:23:
e5:c4:ba:6a:71:a4:ec:16:cf:49:a1:6d:19:bc:5d:6b:0b:8d:
03:ba:02:f5:41:c0:7d:e1:91:1c:d4:37:d1:6e:c5:7a:bd:60:
61:75:50:7a:bc:b6:32:05:8d:8c:46:4f:31:ae:8c:a8:61:eb:
f9:85:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client