Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: GCpjpO8VC2It/87aAkpNiwW/GxGwHbf0sZ2GNaktiWs=
Subject key identifier: 1A:E2:D4:DD:91:03:07:07:A5:2D:97:64:3F:9C:F0:60:99:22:D4:9F
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 0199349237FFECBAA4B2C3F04900B9C32753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 04BF
Signing time: Wed 10 Sep 2025 17:00:21 +0000
Manifest this update: Wed 10 Sep 2025 17:00:21 +0000
Manifest next update: Thu 11 Sep 2025 17:00:21 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: Nlbzzeaf5WsHhNmUKuluPX3QnJAHccZaWT3nGdk0MyY=)
2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:37:ff:ec:ba:a4:b2:c3:f0:49:00:b9:c3:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Sep 10 17:00:21 2025 GMT
Not After : Sep 11 17:00:21 2025 GMT
Subject: CN=1ae2d4dd91030707a52d97643f9cf0609922d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:0b:51:23:15:6e:d5:ad:92:cb:05:f9:7c:
9c:21:ce:00:89:f0:3c:d2:59:b8:a1:41:43:21:56:
89:6b:89:40:bf:34:6d:9d:d4:8c:60:da:41:e7:b8:
bf:70:df:7d:cb:b7:b9:fa:42:86:47:a4:67:14:ae:
1c:b3:93:06:f2:84:a6:f0:5c:71:cc:67:35:fd:7f:
7d:44:68:43:93:70:00:28:85:93:4b:16:ff:a0:cc:
7d:06:f5:a8:ac:fc:2b:30:f0:81:fc:e4:6e:52:79:
3b:81:fb:70:4a:dc:85:11:75:f6:7d:bc:c3:c8:e6:
ed:b7:af:b4:16:35:be:18:ec:1c:af:37:df:b7:40:
4a:9f:d1:2b:9d:31:95:9e:94:3f:91:d0:7a:21:6e:
9d:be:e9:06:28:c4:b0:db:f3:33:35:f3:8c:56:35:
da:5e:bb:43:91:70:5d:a6:a0:b1:ef:36:11:b0:90:
c4:80:3b:1a:c2:ea:fd:21:13:14:b9:22:8c:fb:de:
be:55:c8:57:ad:78:98:8b:ae:a6:e6:22:20:c2:9b:
22:f1:63:c1:6f:07:9c:21:87:b2:2c:fc:1a:f5:b3:
36:a2:b3:d2:9a:4f:74:54:e1:49:f3:d8:ca:6f:73:
f4:c6:56:65:da:5c:77:36:7d:fc:25:b7:a0:de:9e:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:D4:DD:91:03:07:07:A5:2D:97:64:3F:9C:F0:60:99:22:D4:9F
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f6:ce:4d:fc:ee:6f:d5:08:75:b2:76:68:63:5d:50:b0:44:
b3:d1:93:9f:6a:cf:ba:05:39:7f:1c:89:0b:9c:5f:c7:37:4f:
a2:1c:5f:5d:9c:de:7d:ae:e8:83:38:4e:75:85:5b:7d:13:a6:
be:14:4a:20:31:1c:ae:8b:f6:34:23:2b:21:58:a0:f4:be:a7:
f0:c7:74:59:61:97:4d:c6:d8:3e:42:ca:56:c3:7f:49:b4:cf:
13:cb:3a:23:83:4c:92:bd:08:f4:cb:f7:7f:7b:e8:9e:73:3e:
95:19:f7:b7:05:bc:5e:bc:00:21:6b:fc:f0:70:e7:a1:c2:94:
fe:ef:64:d7:30:53:ee:dd:71:80:42:b8:1a:03:94:9d:09:5a:
df:64:54:b6:ca:67:a6:86:6f:12:a5:94:06:93:dc:87:9e:a3:
cf:ce:bd:c5:95:77:22:7a:4b:4b:92:88:19:f7:8b:41:0c:80:
5e:4c:0d:5e:9e:ca:0a:2c:65:2d:87:50:9a:f0:1a:a0:41:c3:
ad:49:7a:93:14:79:46:9c:dd:37:a0:8d:c5:88:74:52:09:dd:
b5:dc:7e:b8:de:63:26:03:a0:e5:61:71:67:87:ab:b0:bb:65:
b9:95:01:8a:49:5f:3d:4e:05:5d:c4:78:f2:f5:4d:e8:81:20:
37:85:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:44:58 2025 by rpki-client