Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: xx2eoRRTm8/NlD0Nl2KigNdilfLsCqxf1QnQlPfO5gI=
Subject key identifier: 3D:61:CC:6D:0C:A4:DB:06:0C:E0:65:19:B4:20:9C:3F:20:DB:65:AD
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019927E9BFE81224EF6AFB22F0083B7B57D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 06:00:54 +0000
Manifest this update: Mon 08 Sep 2025 06:00:54 +0000
Manifest next update: Tue 09 Sep 2025 06:00:54 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: JZbNkxIfFyy3WYZ4xke2GT5KYu2q0gWrXMoaWwXAL6U=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:bf:e8:12:24:ef:6a:fb:22:f0:08:3b:7b:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Sep 8 06:00:54 2025 GMT
Not After : Sep 9 06:00:54 2025 GMT
Subject: CN=3d61cc6d0ca4db060ce06519b4209c3f20db65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:72:64:72:6c:05:a4:62:5d:ad:b4:ed:d1:
ad:88:83:bf:dd:7a:bc:dc:2d:dd:73:bd:f9:b9:7b:
99:51:42:37:00:e0:26:ed:e4:2b:28:29:ba:22:a9:
46:20:c2:03:0d:a9:98:9b:01:41:a4:65:62:ec:1e:
47:97:80:62:07:7f:c0:4e:a7:96:93:1e:52:93:6e:
df:f5:91:11:16:d9:22:52:a9:47:5c:e9:91:d4:b9:
ce:52:47:b3:51:59:68:94:4c:4d:fa:ba:47:64:d6:
0b:31:e9:d8:31:06:22:5c:50:ac:bc:34:4b:cb:50:
1a:35:5e:42:3f:61:ee:cb:90:bf:6f:e8:4a:d1:05:
e7:71:4f:9a:40:7d:07:63:e0:96:cc:2a:d5:b2:00:
16:ca:c5:0b:93:fd:16:61:5b:ee:8f:91:1e:ee:3a:
c3:96:94:d1:f4:6b:fa:18:60:15:a5:f5:9b:cf:5a:
8a:cf:e1:ba:60:33:97:d5:0f:01:4d:98:15:c5:60:
7e:3a:dc:05:97:c6:af:79:89:d4:cc:b5:3f:fc:d7:
3f:2a:59:6f:c7:0b:6d:cd:b7:78:bb:15:29:40:e3:
cd:70:95:71:5c:18:ee:0c:7a:ac:f2:8c:a7:98:76:
59:71:b3:43:bd:61:af:8c:67:59:b9:71:af:3c:8c:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:CC:6D:0C:A4:DB:06:0C:E0:65:19:B4:20:9C:3F:20:DB:65:AD
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:40:ce:df:b6:1d:ac:f0:02:32:f2:87:82:74:b5:b2:3d:
d5:c1:50:03:e3:9e:1d:2d:7b:ee:bb:cd:5c:03:8e:a2:2f:43:
1c:43:9b:81:c3:82:86:b2:c7:27:39:76:40:20:a4:3e:4e:b8:
b9:08:da:76:01:b3:5b:b9:2f:12:78:d7:e1:43:70:2e:fe:10:
17:14:33:ef:74:38:58:5c:d3:99:9e:44:ec:a6:24:05:36:33:
04:04:4e:d8:da:c9:87:f0:f6:36:e1:04:49:05:36:c7:f9:61:
85:d1:b1:a7:e7:17:0f:83:5d:d9:48:0d:86:95:13:cf:c8:38:
fb:6d:fe:74:8d:9f:d8:52:63:84:5c:2a:ec:e4:bf:bc:e0:15:
1b:4c:10:29:7e:e1:3c:d7:59:f3:22:f6:9c:0f:35:fc:3e:ac:
42:8d:0f:da:5f:81:8d:e7:84:ae:c3:c8:4c:03:7c:08:c0:78:
3d:61:3c:02:fc:ba:d1:22:81:3d:f4:ee:46:cd:97:b4:82:b6:
c5:ec:bb:0a:57:ee:4b:16:e0:2e:d4:93:d5:f4:cb:a6:31:68:
a5:f9:91:1e:7c:e8:a5:9d:ea:30:5b:de:a2:0c:81:47:13:09:
91:82:50:c1:5c:b9:be:ec:64:19:8d:d6:ed:0c:8a:7b:1c:53:
ed:76:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:08:46 2025 by rpki-client