Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: pvDejLkrHvBm4eyC8ONFlPYW6QvevAP5jKvggWIKxp0=
Subject key identifier: 12:28:8E:EA:50:E7:97:73:4A:A8:AB:47:A5:3C:B6:55:26:68:55:ED
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 0199228D1C2AAB9ADC05E50DB8BD7E225A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 01A4
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: 0pN0WpepxA/lN3AaZa1U3oRhTNw11wDrdBs9tjz3B1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1c:2a:ab:9a:dc:05:e5:0d:b8:bd:7e:22:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=12288eea50e797734aa8ab47a53cb655266855ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:5a:05:ef:5c:81:76:74:e6:2d:0f:e5:75:
fb:64:71:09:d9:83:53:73:5c:2e:64:66:88:ff:e4:
de:f9:29:f6:ea:8d:57:53:95:ce:07:25:65:9d:fd:
c6:fc:c1:50:36:e1:50:8b:96:e7:bf:ee:c7:35:51:
e6:e5:90:5f:40:66:c9:ed:88:e7:52:b6:5b:dc:ae:
0a:c8:8f:4f:d0:85:97:8a:92:e0:f8:60:d5:f7:72:
dd:ba:0d:a0:8e:d8:24:08:d7:9e:0a:ba:b8:69:47:
8d:1e:b8:da:d6:68:e8:3c:67:04:cf:87:37:9b:89:
e8:85:e4:cb:1d:15:14:86:95:6e:4e:d1:db:59:5d:
07:3e:1b:ed:ba:a9:9f:7d:93:3f:69:4f:ee:f9:1f:
1c:47:fa:03:27:cd:fb:21:7e:3b:88:ab:1a:ed:b7:
ae:71:97:50:41:2d:91:36:5d:f7:e4:ee:84:c5:6a:
93:7f:c3:a1:95:ab:6a:87:6c:78:f0:9d:75:43:88:
d2:63:fe:68:6e:2f:b1:bb:e6:bb:58:58:26:78:e7:
27:f3:be:dd:42:f4:b4:da:be:3d:bb:cd:4f:57:87:
ab:f4:1c:e3:c3:b0:01:96:99:f2:b3:fc:f8:19:d0:
7e:1e:c1:2f:e2:86:2d:0d:00:2f:af:e7:83:de:1d:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:8E:EA:50:E7:97:73:4A:A8:AB:47:A5:3C:B6:55:26:68:55:ED
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:06:62:f6:5f:26:de:e0:a2:18:a3:4f:fb:a8:66:f5:bf:
b2:6e:07:d3:f5:9d:de:4d:fb:41:c9:48:b2:54:88:02:75:0e:
ea:5c:b1:e9:a8:9c:7e:c4:6a:97:54:aa:b4:80:28:b1:dd:ef:
7a:69:0c:c4:c4:d9:db:ee:14:cf:11:9e:23:15:f6:09:82:89:
ab:38:ea:ef:35:e5:aa:74:a2:7d:92:46:27:97:c0:0a:e7:77:
b7:20:6f:51:1a:13:b7:f9:c3:76:bc:59:e7:23:7a:84:39:c3:
54:cc:d9:0e:e8:13:5d:bd:b6:b2:ce:c6:7c:4c:36:82:fe:e7:
82:7f:2d:5a:58:a9:d2:62:a1:a3:01:01:85:64:0b:b1:29:80:
8a:17:35:f3:08:f9:c6:f7:8e:92:8d:a2:5e:9d:d7:4e:63:0e:
54:cb:6a:f0:72:68:ff:64:4d:76:b8:20:ed:f9:a3:64:39:a1:
63:98:4b:fe:77:7f:90:26:94:4a:18:75:65:a6:66:fd:79:34:
1f:16:07:d2:4f:5c:6f:09:2f:80:ca:a9:db:8c:a8:7d:37:af:
17:30:e5:f7:e4:46:a0:1d:9e:5d:8e:35:6d:d6:12:8f:c6:3d:
96:27:e7:e2:3c:3e:fe:10:50:29:35:7a:1e:9f:90:13:30:c6:
33:2a:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client