Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: unoNwwxwAcsiPGeRVecbjVUQIrnhvejUlJAaJtDTou8=
Subject key identifier: 5B:76:04:C7:51:AF:F4:C1:1A:08:CF:B0:63:B5:B1:A5:6B:5D:40:FF
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 019922FA2E4DFC4F695686A90C6A6BFD8185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 04CE
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: LjTMrpLkHsjyNaBfO13h+6hVJloEYYtXadXaLuQfIu8=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2e:4d:fc:4f:69:56:86:a9:0c:6a:6b:fd:81:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=5b7604c751aff4c11a08cfb063b5b1a56b5d40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:c4:54:e4:b7:1d:e5:62:e9:40:ef:de:ca:
57:59:a1:c9:ed:d0:1a:78:f1:13:66:ff:54:de:71:
4e:77:16:d8:76:28:54:5e:8f:5f:a9:6a:ed:8f:c8:
14:b1:1c:1f:a9:03:17:6f:2f:2e:1f:3d:46:a4:8d:
14:ba:4f:1c:81:d2:4d:ca:c2:8d:7a:ff:9c:7a:aa:
0f:69:02:e2:50:9d:b6:8e:83:db:1f:ce:9a:80:c8:
d1:d9:8c:6a:3d:bf:08:72:8f:78:c0:97:0d:ed:5a:
9e:70:fc:50:dc:8c:30:cb:e2:62:13:0a:fb:a0:77:
14:71:bf:82:f3:7f:15:b3:28:21:2c:24:d5:6d:eb:
30:45:ed:12:37:8a:ab:2f:c9:51:dd:9e:86:4d:43:
70:3e:bc:d2:17:3a:33:90:16:57:61:d9:cf:3c:57:
f0:12:c2:98:72:f3:b2:13:fb:fe:ea:46:d9:f9:05:
20:1b:90:25:a5:81:d2:aa:3f:7f:6f:78:fa:df:53:
6c:f9:9d:ac:1d:56:3c:7f:d3:21:e7:be:f0:c8:8c:
b9:68:01:21:72:55:9b:c6:b8:84:c0:68:fb:d3:d9:
1a:c8:e8:88:55:d3:02:00:37:41:a7:73:d3:4d:a7:
64:8c:13:46:31:2b:3b:bb:fc:b0:ef:19:af:1e:79:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:04:C7:51:AF:F4:C1:1A:08:CF:B0:63:B5:B1:A5:6B:5D:40:FF
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ad:b9:03:bc:e1:20:8d:c3:20:08:05:55:1b:d4:58:74:e0:
cc:7b:1b:23:a2:cf:44:fb:31:8b:b2:30:53:3d:5e:66:bf:ec:
15:44:c2:23:21:75:d7:b7:83:e4:20:ea:00:8c:fa:00:01:0e:
b0:3b:aa:ed:4d:d9:a9:52:45:12:02:4c:03:96:a2:cf:45:78:
12:8c:5a:67:47:a7:e2:2a:49:d3:68:7e:32:5f:2f:f7:f7:45:
99:34:d7:54:0c:7c:cb:a0:f2:92:f4:da:f0:45:7c:d6:94:fb:
70:83:98:ef:1f:90:77:f5:05:fc:90:4d:79:8a:c1:af:d2:82:
9b:a9:c4:c5:5e:df:af:23:3b:09:4b:bc:7d:3a:9c:84:a1:41:
81:e2:59:a2:1e:b0:d2:9b:58:36:c4:1f:e5:54:a0:b6:a6:13:
b1:50:4d:4e:ef:a9:ea:3d:00:e6:c1:8e:54:02:d4:6c:2e:30:
8b:ad:a9:4c:15:bb:51:27:8d:cc:47:ce:9c:26:e0:68:1e:45:
40:fd:7f:d6:39:15:57:79:33:8c:c6:b0:e9:30:4d:a0:44:88:
6a:d0:7b:65:84:af:e8:97:56:5b:ad:1a:cd:e5:75:81:cc:84:
ee:07:6d:89:c2:e0:3a:2c:c9:2b:d6:6d:b2:d1:08:7b:95:ea:
cc:6c:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:15 2025 by rpki-client