Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: mTzT5PCnaXqjynnk4BA0FfjlQ1t3FzDUHVVfU4rzI3c=
Subject key identifier: 6B:74:E0:1B:FF:4D:62:1F:DE:88:DC:B6:21:89:E2:5C:B0:2E:8B:DA
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 0199548B8D4317AD5EBFEF57E2383FA676E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0401
Signing time: Tue 16 Sep 2025 22:00:55 +0000
Manifest this update: Tue 16 Sep 2025 22:00:55 +0000
Manifest next update: Wed 17 Sep 2025 22:00:55 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: qNnADMGTTIP8qCqT7KNq65gVChY93n2lltF15DbjgJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:8b:8d:43:17:ad:5e:bf:ef:57:e2:38:3f:a6:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Sep 16 22:00:55 2025 GMT
Not After : Sep 17 22:00:55 2025 GMT
Subject: CN=6b74e01bff4d621fde88dcb62189e25cb02e8bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:81:28:25:77:c3:49:9d:0d:ef:ca:a8:94:
79:39:26:e0:0f:86:c9:35:55:7e:d6:53:a6:5b:cb:
06:12:5c:b1:b0:e3:d9:16:1c:a0:8d:55:0e:2c:35:
8d:ab:2b:00:e9:fd:a6:e8:9f:67:a0:86:13:5e:27:
43:13:a4:5f:c5:13:48:d0:6a:ff:4e:b6:d2:d0:34:
e2:07:cb:a0:c9:71:4a:7a:99:72:8d:1f:49:fe:58:
02:72:85:d4:6b:67:1e:1e:d6:ea:ad:d5:00:29:c2:
6d:98:45:3f:8d:a7:0a:7f:ae:9f:ea:23:4a:80:83:
eb:46:d2:5b:6e:66:9e:0d:bc:51:a7:e7:b8:d2:3b:
89:06:10:ce:13:ba:29:65:98:49:6b:0f:1d:5d:b5:
6c:c8:2f:6b:d8:97:05:87:72:1e:ac:bd:68:31:3b:
4a:f3:45:1f:05:40:74:38:83:66:8a:ad:96:08:4d:
9a:f6:51:b7:ad:31:70:6b:60:46:a8:55:d1:51:d7:
aa:e3:6e:93:54:b1:ed:38:06:2f:36:c7:98:ec:a5:
40:6e:ba:0b:08:fe:06:2c:ac:44:9a:ac:96:93:d8:
ae:0d:0b:5e:ee:c1:3a:16:46:45:af:a2:ec:c3:c9:
1a:45:f8:1d:94:43:f5:42:13:1b:5e:e9:c1:23:70:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:E0:1B:FF:4D:62:1F:DE:88:DC:B6:21:89:E2:5C:B0:2E:8B:DA
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0b:8a:1b:4f:62:77:91:6c:77:45:6f:9e:2a:80:29:d0:00:
80:9e:c9:89:68:7a:ac:b7:52:66:9e:b5:11:13:8b:29:35:7e:
d7:5b:7d:7c:fa:ac:fc:eb:30:54:08:d4:ae:26:3f:22:7e:72:
e5:17:58:06:78:be:fa:7b:31:c0:79:81:a9:5c:bd:40:87:2c:
79:d8:b9:31:fa:57:cb:5f:e9:e7:0f:20:64:e4:5a:25:20:c0:
c3:f0:69:b6:ee:2a:cf:79:e2:92:61:38:0c:0e:52:e2:11:f3:
03:d5:86:58:dd:43:40:32:fb:ef:80:be:31:d0:6d:f6:86:f3:
88:b6:e9:7a:8f:07:81:d0:4e:af:58:de:b5:85:aa:75:b4:83:
56:b8:0e:5d:53:3a:2c:c1:ec:10:52:20:b1:c6:0a:6a:d8:c9:
49:fa:b7:29:0b:e8:aa:5c:34:de:14:52:94:02:4a:0f:dd:d5:
04:2a:e1:f5:94:83:87:c1:53:f1:ac:b2:3d:a1:e2:c7:96:e7:
cd:b9:3c:ec:28:02:95:bd:a8:8f:88:04:60:68:5e:20:d3:d5:
4d:e4:3b:e5:b9:c9:20:17:e5:9d:9b:12:4c:1a:e7:c1:bf:08:
33:57:e5:0c:54:9f:f4:21:50:f5:59:5e:3d:7e:b2:ec:dc:83:
b5:dc:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:28:10 2025 by rpki-client