Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: Vg5U66WQ9C78c5HJpdBLyfiW5Y/y8Tlbtrabhy/ZXlU=
Subject key identifier: 7C:AA:7D:6E:06:5E:06:C5:1F:71:FD:8F:8E:5D:76:D5:2F:84:9C:B3
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 0199228C5C8DF20992A564B03F8F43FEBAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0A77
Signing time: Sun 07 Sep 2025 05:00:48 +0000
Manifest this update: Sun 07 Sep 2025 05:00:48 +0000
Manifest next update: Mon 08 Sep 2025 05:00:48 +0000
Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=)
2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: //m+pGpq3BKk4S4it5xgINHBQqgx6jMSEhm0aROkUf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5c:8d:f2:09:92:a5:64:b0:3f:8f:43:fe:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Sep 7 05:00:48 2025 GMT
Not After : Sep 8 05:00:48 2025 GMT
Subject: CN=7caa7d6e065e06c51f71fd8f8e5d76d52f849cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:b7:aa:56:42:d0:90:d7:4a:e6:b1:21:77:
c4:36:89:f3:4d:8b:06:40:90:98:ea:80:a2:c3:f4:
1f:a9:0e:16:b8:7c:7b:8f:84:94:a1:5f:17:d7:76:
7c:e5:09:52:dc:14:d9:6b:75:c8:d3:d7:33:aa:3a:
cc:a8:50:58:bd:fd:30:20:7c:9b:c1:af:2b:ee:62:
34:18:52:a3:19:9d:50:53:61:7a:e7:ef:e0:c0:02:
6f:e1:dc:4f:9b:fe:25:02:46:66:52:87:6f:c1:80:
25:6d:a1:4c:5e:5a:d2:a7:0a:b3:90:25:5a:29:a8:
38:92:b0:71:25:2f:31:b3:f2:04:60:3f:e8:0d:ba:
79:39:f5:71:b7:8b:9a:60:5c:14:4e:5c:1a:b9:4b:
d5:44:d1:e9:52:8b:be:41:88:e9:da:d9:38:4b:6f:
13:c4:ff:cb:c7:17:fc:16:60:d4:e2:ed:1d:15:52:
90:24:15:59:ae:51:b0:c7:45:f7:f5:a4:62:fc:5e:
49:59:b7:eb:2f:71:62:83:5d:f2:7c:92:0f:e1:60:
c5:3d:2f:21:5a:ab:0e:fd:3f:2f:49:c8:e0:89:49:
85:dd:f0:35:a6:ce:22:10:53:97:93:29:61:93:2d:
66:5c:f4:70:f8:d1:b9:04:b3:6f:b9:73:6c:af:1b:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:7D:6E:06:5E:06:C5:1F:71:FD:8F:8E:5D:76:D5:2F:84:9C:B3
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:54:f0:fe:75:99:3a:ae:7b:68:0c:d1:f2:46:75:63:04:
16:e0:74:18:f2:9d:ed:ef:d2:f9:58:47:3c:0a:a7:e9:d5:74:
70:74:af:cb:8e:87:a2:6a:0c:f1:e3:b4:e3:c3:6d:e4:a8:89:
6a:af:62:b8:cb:10:ae:fd:1d:b2:a2:c4:13:47:aa:cf:dd:2a:
9c:9d:25:17:44:38:00:43:e9:5d:8c:3a:7d:17:f4:a6:01:9f:
68:c2:58:76:7c:aa:d4:f0:a5:0b:b4:67:66:28:8e:68:38:74:
a2:19:4c:2e:88:16:0c:c9:b9:bb:ed:92:1c:4b:43:d4:39:f7:
39:4c:39:0e:98:58:95:e0:57:3c:e3:0b:f3:38:87:47:77:6d:
28:0a:93:c4:47:7a:42:8a:66:83:4e:a9:da:7c:3a:1c:40:7a:
22:bf:42:6c:e4:f0:e3:4d:92:ed:9d:8e:ff:39:bc:2b:3f:d7:
fc:17:8d:05:4b:0b:79:d4:8f:29:6d:92:e4:3b:48:55:49:8c:
12:72:4d:10:d7:a7:07:62:1b:de:30:11:cb:9f:70:2c:41:02:
fa:d6:c3:6b:7f:37:d2:7f:9a:22:b0:c5:4a:f2:14:89:b0:21:
fd:82:61:6e:e8:87:a5:61:e5:15:ef:a0:5a:62:da:61:6d:c7:
c7:ab:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:38 2025 by rpki-client