Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: VFzYLvot4Wf5KT49oq1G4XCNdGQquKZDmNqeSQHZFDY=
Subject key identifier: 2F:B7:6B:FD:D2:CC:49:4C:87:3D:06:F3:98:B6:1B:BE:5F:9C:56:C9
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 01992D474042A598E10118F6AA3766C44818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1609
Signing time: Tue 09 Sep 2025 07:01:08 +0000
Manifest this update: Tue 09 Sep 2025 07:01:08 +0000
Manifest next update: Wed 10 Sep 2025 07:01:08 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: aBkGezd4Aq4Rd1toz3KC/Fw40YnHBydjjVpJ9rWnuTM=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:40:42:a5:98:e1:01:18:f6:aa:37:66:c4:48:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Sep 9 07:01:08 2025 GMT
Not After : Sep 10 07:01:08 2025 GMT
Subject: CN=2fb76bfdd2cc494c873d06f398b61bbe5f9c56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:d9:4e:1e:a0:6c:73:88:4b:ce:0f:47:39:
43:e8:ce:5d:ef:52:1f:79:7d:6d:f4:a3:1f:e8:b1:
b9:a4:42:b8:68:90:5c:14:81:c1:54:12:3b:b6:d2:
53:f3:73:8c:39:28:d8:55:88:71:f3:b5:5a:ce:90:
2d:01:60:ae:e2:c6:9e:12:8c:23:38:42:4a:4d:73:
23:c4:64:47:99:af:39:2b:4d:de:e5:9d:23:5d:af:
97:14:8d:b8:b9:25:ba:9f:57:70:da:c6:55:34:a0:
0a:17:54:be:eb:55:81:4c:93:59:97:76:64:ae:80:
ea:55:b1:f7:8a:cc:e0:35:0e:9c:54:1c:03:76:94:
c4:d4:61:04:ec:43:ff:fe:99:37:26:76:67:45:3f:
44:9c:25:55:d6:d4:f5:33:e1:3a:c9:18:cb:d7:1d:
b9:7b:40:49:7c:6f:72:af:e4:e5:10:2a:f7:e1:7d:
03:15:bf:26:4f:77:6a:ca:f2:4a:f0:cc:88:6d:87:
e3:f7:3f:35:93:0b:d5:92:f0:63:5c:f9:d4:e4:78:
a7:0a:ef:d0:4f:31:42:bb:9b:69:3d:02:3d:59:67:
5d:27:c9:f9:c6:d3:08:29:eb:43:aa:90:f9:88:a4:
f3:fb:48:98:07:f8:70:5d:25:73:22:ab:4a:b2:c7:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:6B:FD:D2:CC:49:4C:87:3D:06:F3:98:B6:1B:BE:5F:9C:56:C9
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:bf:bc:1f:ed:dc:69:06:84:74:e0:27:a5:5c:82:98:34:
71:39:68:a7:84:cf:23:87:5c:f5:36:ce:5e:ff:9b:f7:13:5b:
48:67:11:8b:25:56:c6:49:ee:b5:2a:4f:4e:41:ed:96:05:39:
f0:35:9b:1e:82:24:aa:0f:61:bc:ee:23:5d:f9:6e:36:20:09:
f1:99:b7:86:fe:0f:c2:fe:22:3e:e9:fb:1e:dd:5e:67:b2:56:
dd:54:64:bd:55:43:d4:3d:c5:a6:72:e4:b2:17:ef:29:2a:e4:
bb:9d:0a:34:bd:cc:ea:f1:9f:2b:11:d5:78:7b:b3:76:14:49:
6f:1b:5d:5a:23:0a:c7:4d:72:6a:12:ee:8f:d9:11:f6:f8:8f:
b0:5d:21:35:1b:54:96:a4:f7:df:24:d9:7a:e3:af:17:23:5d:
dc:fc:28:0e:d3:11:39:18:10:84:fa:82:cd:0c:2e:36:57:10:
6a:61:07:cc:9c:63:2b:38:52:b8:3a:6d:6d:14:6e:1a:49:7c:
ba:3e:40:86:c3:8d:c2:0d:1f:32:f9:97:f5:74:f6:fc:78:a8:
cf:83:53:43:f3:bc:db:d8:f9:5d:b1:c4:21:85:85:25:e3:b2:
b3:39:5c:c2:a5:5b:f5:b8:a3:6b:65:59:19:19:36:c5:22:1d:
15:d2:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:02:47 2025 by rpki-client