Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: EX41/ql1Od7JUZVf0xYxDMnpEAdqAHh4S6XhvBWeTH0=
Subject key identifier: CB:05:72:AE:AB:E0:EB:D4:5F:C8:98:7D:9C:D0:4B:8D:29:7D:71:C3
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019922C3549D64942E86E5174D30B9673D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 04AA
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: 3ry2pxc+qQLyZfC6b3/RrpETwSbvq4uYPSxEACJInA0=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:54:9d:64:94:2e:86:e5:17:4d:30:b9:67:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=cb0572aeabe0ebd45fc8987d9cd04b8d297d71c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:09:0a:94:6d:e2:af:9e:ae:f0:9e:3e:e7:
1a:5e:be:7b:b1:38:b2:7f:45:31:59:59:83:4b:d2:
39:6a:c6:9f:0a:d7:ed:94:97:64:b7:e8:17:9e:0b:
06:56:e1:b4:ca:b2:4e:f1:fb:ec:c9:4b:6b:90:9b:
c8:34:f1:86:5e:fb:99:42:73:93:c5:78:8f:da:fd:
02:69:5f:3d:61:8b:0b:6c:f8:06:0b:4d:61:0d:04:
68:d2:3a:12:14:68:1c:dd:6b:a4:7b:f3:40:df:fc:
20:a6:ad:ba:b2:76:90:98:ca:24:eb:eb:72:9a:c4:
6e:bc:3c:a4:f8:84:c1:19:50:25:f9:59:0f:75:7b:
05:fe:55:4c:80:77:3e:7f:cb:0e:e8:f8:84:e9:b1:
a6:08:a5:50:9c:5e:33:ed:86:89:8a:40:bb:2c:a9:
bc:f6:5f:8f:10:75:6e:30:a5:74:de:3d:f7:e3:49:
b1:db:12:ce:a8:4c:f7:5c:42:17:87:85:8a:6b:7b:
af:d4:92:e8:c9:fd:fa:f8:02:39:e7:f5:f8:ab:ae:
9e:6b:57:7a:41:65:24:d1:23:89:d1:1d:80:2d:77:
bc:d3:20:d8:65:d9:1d:86:35:2b:f0:74:08:47:60:
c5:23:93:be:c4:c9:b6:17:b3:a9:13:66:0d:6d:16:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:72:AE:AB:E0:EB:D4:5F:C8:98:7D:9C:D0:4B:8D:29:7D:71:C3
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:88:e2:fe:c3:31:e3:b3:41:d7:af:dc:7f:b5:46:d4:25:
19:21:06:61:ec:94:b2:ea:43:53:8c:b0:32:22:04:04:96:82:
d2:51:4b:cf:ee:0e:e6:3a:c2:2f:8a:a6:3e:f7:b4:f7:23:24:
06:a6:e4:cc:cb:6f:5a:b4:cf:f2:ea:d5:f9:46:77:47:ca:9a:
69:df:a5:bb:5b:c5:f0:7b:38:d4:16:e0:62:67:6c:74:63:ce:
2c:1c:f2:0c:93:f9:29:66:c5:92:0b:f5:57:95:47:26:d6:7a:
6a:d7:4f:72:3d:01:59:7a:35:f8:d0:42:34:6f:bd:85:a1:b0:
80:8d:37:84:a2:57:a4:e3:5c:d1:d9:80:87:b8:b1:75:43:a9:
5e:70:af:d4:09:02:dd:21:fb:06:4f:7a:9c:c3:08:ed:b5:d6:
79:59:56:f6:ba:34:20:50:7c:49:db:03:23:86:74:db:8a:65:
cb:05:97:af:d7:ad:83:e4:0e:ba:91:39:19:76:b8:e9:8a:2a:
ac:a1:b6:d6:5e:1d:ec:87:37:65:c4:90:fe:4f:56:dc:63:67:
66:b8:0b:ad:9f:db:85:31:03:e1:7c:75:03:f4:ea:ef:6b:d2:
31:c6:5b:59:37:c5:39:42:82:ed:37:cb:9f:c8:2e:2e:4c:25:
b5:06:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:45 2025 by rpki-client