Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: L/KvLczpY3HCxIlLGtAPABnggdh8hC6Zp7IqlQ9qQws=
Subject key identifier: 55:9C:6F:52:0E:B3:5B:8A:E1:3B:53:18:5F:C0:80:44:29:8E:A7:38
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 01993313B69B52D590FDEBBF625EB4B367FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 1278
Signing time: Wed 10 Sep 2025 10:02:33 +0000
Manifest this update: Wed 10 Sep 2025 10:02:33 +0000
Manifest next update: Thu 11 Sep 2025 10:02:33 +0000
Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: UfYT3ea/v9OL72NcBqjpGn9Lj8eFuCidbby1dz/A084=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:b6:9b:52:d5:90:fd:eb:bf:62:5e:b4:b3:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Sep 10 10:02:33 2025 GMT
Not After : Sep 11 10:02:33 2025 GMT
Subject: CN=559c6f520eb35b8ae13b53185fc08044298ea738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:6e:6d:12:d0:4e:d2:81:df:82:de:26:bc:
fd:7f:fb:16:21:6a:73:7b:0d:1c:da:e4:b3:1c:54:
d9:6f:62:29:f4:6d:dc:06:bc:5f:ac:78:f7:9e:ec:
10:21:c9:c9:de:1b:c4:76:08:d4:5e:6a:1f:6a:df:
bf:cc:5d:45:25:d5:98:54:9e:20:e3:d6:a4:64:8a:
2a:f3:19:41:58:6b:48:b9:93:7d:0c:23:88:c3:9c:
2d:44:5e:75:f5:11:39:42:f7:c1:a3:52:8c:f5:2b:
73:2f:14:bb:f0:67:a9:f0:6d:90:a6:2f:b1:97:75:
9e:d1:88:b4:6a:f4:3e:f0:16:1c:40:e6:f7:36:10:
ac:3e:a5:81:8b:7d:f3:31:aa:55:49:98:66:13:95:
75:0e:09:12:0f:a7:29:51:9a:fc:1b:13:60:54:fb:
08:8b:ae:14:4d:00:4d:48:0f:e8:23:29:42:4b:3a:
7b:e2:24:f9:9b:6b:cf:00:77:3c:90:1a:0c:83:47:
36:39:aa:50:3a:51:90:ed:38:ee:9b:55:d8:2e:f0:
ae:db:d4:6c:8d:e5:c2:42:a5:63:bb:5c:cc:4c:b5:
f9:8e:19:30:86:f2:eb:41:bc:83:69:6c:9d:f1:d5:
53:ef:07:4a:d4:ef:b0:4e:58:b5:15:d2:f2:23:71:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:6F:52:0E:B3:5B:8A:E1:3B:53:18:5F:C0:80:44:29:8E:A7:38
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:dc:86:c8:a1:a8:90:42:8a:92:d1:b6:c5:5a:15:fb:89:
fd:db:0e:6d:bd:bf:67:88:19:17:76:79:d1:22:88:c2:8f:aa:
23:92:20:67:11:a9:cf:c1:c2:0c:ba:d1:5c:45:11:1e:7f:99:
62:26:31:15:31:54:3e:f8:fd:3a:b2:13:50:8e:ca:25:4e:51:
cb:02:b2:17:2f:58:52:21:d1:90:86:75:8b:1d:78:8d:b6:90:
41:c5:58:d8:e3:18:69:20:c4:08:e8:07:8c:5b:ed:b5:02:44:
e0:9d:bc:1a:17:1f:45:48:00:cb:58:7a:a7:4e:c1:11:ca:08:
4b:11:16:e1:7c:f0:07:d4:aa:c6:8c:8f:b7:c1:d2:57:c9:ee:
85:d2:de:84:12:50:82:23:fd:a2:b7:1f:34:99:4e:1c:5a:fb:
5b:81:2e:7c:3c:f5:cf:d4:19:97:a2:ae:ac:86:c9:18:56:c7:
bc:d4:d4:74:f4:2c:6d:76:10:ab:e3:2c:fa:48:cb:e8:03:1f:
21:bc:2a:54:4b:3f:97:b4:2c:38:0d:98:f0:ce:67:a4:f8:4d:
02:da:6f:92:a1:72:66:c0:a2:09:8a:b6:db:60:73:78:4d:bc:
2b:f2:29:a9:80:ed:38:a4:cf:23:00:4a:17:fb:4c:e2:18:53:
74:80:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:11:35 2025 by rpki-client