Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: DZdqkZJ1yTu1TYvApRLcmwIq6HJYBTbrVpx31c+5B+g=
Subject key identifier: D4:A9:33:11:6F:1B:EA:7F:46:94:01:F3:EC:E4:C1:15:9F:98:BB:7C
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019923D64BBA1E5700535CAF3745E5A89E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0F38
Signing time: Sun 07 Sep 2025 11:01:10 +0000
Manifest this update: Sun 07 Sep 2025 11:01:10 +0000
Manifest next update: Mon 08 Sep 2025 11:01:10 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: PiITZIKo4RecksZVZZr4/HsD2EPlI/uaam83Lw27tF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:4b:ba:1e:57:00:53:5c:af:37:45:e5:a8:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Sep 7 11:01:10 2025 GMT
Not After : Sep 8 11:01:10 2025 GMT
Subject: CN=d4a933116f1bea7f469401f3ece4c1159f98bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:99:dc:1a:74:4c:05:42:0d:67:7b:15:95:
6a:40:c9:f9:47:ca:2a:9e:21:ce:b9:cf:2d:2a:47:
7b:32:44:1e:a7:71:91:37:dc:28:a2:bd:f5:cc:42:
bf:aa:16:18:6b:0d:8d:5e:4e:5d:63:9c:ee:94:33:
1c:45:9c:d7:bc:ea:e1:36:65:81:cc:ac:7e:d1:b0:
eb:84:af:41:b0:67:96:7d:47:74:57:e0:b6:5e:a6:
e5:5f:f3:6f:96:76:5a:24:b9:72:dc:ac:1f:f3:05:
ac:61:f1:75:3a:be:ad:a1:d7:e6:61:6f:56:68:e2:
aa:82:09:7b:05:6d:7f:a2:38:2e:34:56:e8:52:07:
52:32:50:7f:43:d3:9a:e5:00:10:d5:9f:a6:88:c5:
09:01:a8:33:aa:92:17:8e:21:14:74:f1:56:06:21:
50:25:9b:e8:f9:26:dd:ff:a8:98:82:3e:f7:77:ce:
a7:d2:5c:64:4b:89:cd:56:78:4c:c9:e4:6c:71:d1:
9c:52:c2:92:5c:c6:01:d3:f4:92:2c:04:e5:f4:ef:
5e:97:71:ce:9e:f3:1d:f8:ea:ef:4a:83:59:71:bc:
49:6f:1a:c4:e1:7b:49:29:cc:b5:4c:81:2c:67:9c:
1a:e8:f5:ba:8b:b5:9f:e8:a2:35:51:22:3f:d3:5c:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:33:11:6F:1B:EA:7F:46:94:01:F3:EC:E4:C1:15:9F:98:BB:7C
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2e:d7:cf:6f:62:92:2a:51:58:9e:23:7a:9f:4d:a1:6f:cf:
7f:11:33:44:b8:b1:2b:cb:dc:9c:ef:24:4b:4e:70:ff:8f:20:
b2:ec:33:48:d6:2e:3d:de:4e:4a:3e:f1:7e:de:cf:f0:b4:67:
2a:28:49:2f:97:0e:d7:28:b9:38:c9:48:77:b7:c0:d2:1c:ac:
b7:6d:dd:1c:a3:81:70:ee:38:2a:0f:8a:00:0c:47:4f:51:00:
b2:a6:d7:c4:7f:74:cd:a6:da:3b:5d:88:c1:71:15:90:d9:1c:
c7:79:a6:fc:d8:fa:7d:55:28:b8:cd:67:15:f8:35:7b:a4:cf:
0a:81:c0:61:2c:7c:d6:66:d6:69:21:4a:38:6e:e1:67:31:a0:
42:ce:34:63:bc:de:95:3c:36:12:b6:07:6b:15:b8:3e:a3:31:
76:92:2f:e0:e2:91:7d:b7:e2:5c:ab:fb:d6:f2:3f:04:c5:ff:
d6:4d:2e:9e:d9:a4:b2:e4:23:47:54:ae:78:ba:38:c1:ee:c8:
a2:8d:46:c3:f8:16:5d:10:20:00:72:5d:05:e2:21:ef:cf:13:
a6:4d:c8:ce:ce:5b:02:6e:ce:41:ec:15:71:86:6a:3a:a0:61:
3b:65:47:a8:5f:e0:0a:ad:e9:ca:fa:84:d0:13:c8:aa:3c:ec:
a4:a4:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client