Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: kb00bq27/vdeNEWPS9i4Bb+f+kTW0fvfPj+Tb5gv1DU=
Subject key identifier: AF:CD:FE:92:7F:30:77:72:BE:B4:D2:AC:D9:D3:DE:F1:4A:74:0B:00
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019922C3748E99922930EA81B3140CA07A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 1543
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: f2l/9wcIPZrImfSpJ5ipah1LFAUBlKj89VNqg2y99Cg=)
2: kJ6ZzA1fcsMngPwnFcWmPQ2TpJY.roa (hash: spn1/mEz9B8AiCWdxXSLx/VFzig4ReQEdpbCrXX5I3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:74:8e:99:92:29:30:ea:81:b3:14:0c:a0:7a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=afcdfe927f307772beb4d2acd9d3def14a740b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:97:73:e1:1a:d2:9d:37:2d:44:ab:16:7f:
36:d8:ba:4e:4f:ee:28:f7:c9:cf:d0:a1:d6:0b:92:
0a:58:b2:59:1e:a6:cf:24:66:e9:69:d9:28:29:e0:
8a:31:e2:2f:c3:7a:06:ad:ae:69:22:0c:68:b1:8b:
e9:57:c6:52:1b:86:70:c0:12:f5:59:f3:a5:d5:a1:
4a:4a:36:08:d7:dc:0e:14:47:f4:84:60:f5:2e:1b:
72:98:fc:b8:6e:55:e6:b8:3b:cb:ea:28:dd:99:58:
98:94:ac:bf:c4:e5:5e:e8:44:8a:0d:0e:b7:99:97:
cc:b7:51:5f:8e:47:68:f2:9e:95:cd:91:76:0d:01:
47:86:db:9e:4f:3d:69:df:79:a3:33:2c:cb:4b:11:
45:27:7c:0d:a7:c4:d5:bd:4b:9b:b9:26:44:72:78:
a4:85:0b:03:a3:41:eb:9f:41:7d:90:30:93:54:84:
2a:fd:9f:08:8e:ba:d1:12:16:a1:e8:23:c4:c7:49:
96:a1:3e:30:a9:50:ee:66:3c:dd:58:7e:63:ba:96:
81:57:10:37:36:05:5f:1e:ff:eb:6a:2c:f0:ae:a9:
a7:2e:d6:b5:cb:4b:1f:52:68:50:3f:2a:67:ab:98:
d2:d9:93:da:b1:64:9f:f6:e5:32:d6:a9:9b:c5:37:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:FE:92:7F:30:77:72:BE:B4:D2:AC:D9:D3:DE:F1:4A:74:0B:00
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:41:58:c7:0c:fb:a5:a1:e7:8b:64:f2:21:1a:36:99:17:
67:f2:09:b5:8a:22:22:f7:40:e6:46:f8:62:64:70:f8:f1:be:
71:c7:74:62:eb:8f:00:0f:99:c8:fa:62:d9:4f:eb:25:03:1b:
c9:3d:68:aa:51:e8:65:58:10:4b:e6:5e:9f:09:05:1d:02:ba:
5a:93:a3:72:6e:bd:69:3c:d9:88:0b:c8:d5:de:ff:4d:73:8c:
c0:0a:8e:de:f5:17:02:00:b5:b2:9c:19:50:de:32:93:e1:89:
38:92:49:02:9c:6b:fe:fc:55:17:a2:d3:41:b4:86:03:31:ad:
8c:d5:17:6c:f0:ab:0f:96:c1:f4:92:54:79:ec:57:a8:b3:79:
a6:12:f6:33:58:97:2e:5b:63:e4:e3:98:f7:a2:04:d6:ff:86:
24:66:01:cb:04:6b:6c:cb:b7:96:3f:de:a9:ec:04:0b:aa:00:
af:f0:18:6e:e7:7e:ce:3b:bf:fc:2b:a4:3a:aa:eb:16:f4:1f:
33:5d:0e:8f:2e:8a:72:3a:fa:23:13:7d:a2:51:b7:94:ad:6d:
12:06:03:51:bd:b0:84:96:fe:f7:58:6b:0d:2f:a6:91:b7:37:
b7:7a:a5:c0:f5:3e:01:74:24:d0:69:88:6e:61:9c:a7:a6:9d:
0b:af:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:42 2025 by rpki-client