Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: gjRBzcJq2VYy6sN2QuD9xgc1GMQU0RFluq03BHNJjbo=
Subject key identifier: 33:23:D3:7B:7F:AC:81:13:22:F7:2A:10:8B:F2:53:BC:17:6E:38:9B
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 0198A04D8B194EFDF3A7D3403CF49A25CC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 1631
Signing time: Tue 12 Aug 2025 22:01:33 +0000
Manifest this update: Tue 12 Aug 2025 22:01:33 +0000
Manifest next update: Wed 13 Aug 2025 22:01:33 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: S74jAW7VHKqBU17Sqa9iEVxcFXKGWoqV9C+7vF93DVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:8b:19:4e:fd:f3:a7:d3:40:3c:f4:9a:25:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Aug 12 22:01:33 2025 GMT
Not After : Aug 13 22:01:33 2025 GMT
Subject: CN=3323d37b7fac811322f72a108bf253bc176e389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:ef:80:97:b4:7c:5b:2b:d3:55:c5:c9:b5:
76:4b:63:90:0a:d1:07:ee:37:cb:fd:5c:3b:4c:3d:
40:5f:63:4f:fc:8e:34:db:ab:6e:85:58:35:6f:ab:
dc:4e:e1:8b:e3:80:ef:e8:70:8d:7c:ba:d6:58:d8:
b7:8c:e5:1b:ba:74:9e:14:b2:d1:44:18:f8:f3:69:
98:c6:ea:77:e9:88:bc:e5:8e:f3:f8:2b:73:73:fb:
06:2a:b2:d1:fa:c4:15:a5:4a:45:41:b7:b4:c7:a3:
db:e8:09:b7:e3:1d:76:38:4c:3f:2e:2b:2f:9b:4d:
aa:cd:bf:17:40:ec:58:8f:d0:eb:40:d5:e7:54:2a:
9c:07:7b:79:c9:f4:71:01:ad:68:53:08:6c:a0:cb:
ff:1f:21:de:c2:94:9b:93:66:a7:ce:ba:17:75:df:
f4:03:3a:37:fc:f7:35:8f:26:bd:44:06:21:bf:d0:
c6:5c:d3:80:39:7c:69:92:97:f2:da:79:9f:27:46:
20:31:f4:8a:41:5f:4d:fa:c4:20:48:28:8c:d7:cf:
e0:70:e9:ea:fe:5a:f4:18:8f:76:6c:58:30:d1:03:
f3:26:1d:23:74:1b:2a:d6:43:3b:d4:65:56:fc:4c:
06:18:6c:0a:eb:e9:b9:7a:72:20:c6:ed:03:72:10:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:D3:7B:7F:AC:81:13:22:F7:2A:10:8B:F2:53:BC:17:6E:38:9B
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:a2:3f:74:cc:b3:0d:ef:bb:7c:25:82:44:39:ef:3d:06:
1e:ee:9d:bc:d8:c6:ce:af:40:d0:86:c4:b3:22:37:5b:bd:24:
94:22:8c:ee:bd:eb:e6:ee:d1:1d:8e:b4:1a:6f:d2:10:be:fd:
01:ca:7b:44:35:45:c8:23:96:2d:50:16:96:49:16:72:21:6c:
9c:72:cf:5a:6c:e0:9b:a4:de:32:a2:07:85:01:76:42:b1:3b:
1a:64:51:be:a1:2f:e4:ff:db:da:ad:59:ca:a8:87:d9:1b:c2:
85:f1:1e:71:45:a6:b7:75:0c:bb:76:0d:be:f5:d5:09:cf:c4:
4d:d9:db:16:a9:34:b4:71:7a:a8:cf:6d:6b:c0:00:0c:58:db:
e3:ff:f0:18:bf:fc:95:f1:9c:e6:2e:71:15:48:d1:9d:94:4b:
a5:47:22:a1:53:a0:b0:f4:a3:43:f8:cd:41:25:27:f2:90:3a:
7c:a8:72:5c:45:2d:cb:88:21:fa:f7:17:47:f7:0d:ed:32:32:
18:c6:8e:cf:da:4e:d7:bf:9b:91:a9:e3:d0:b7:ce:44:cd:b5:
5a:b2:7c:20:f6:0c:78:5c:11:47:db:01:2f:9f:68:c3:49:4d:
8a:c6:16:c6:94:1c:a6:ab:0c:6f:79:34:b6:87:09:4e:0b:ca:
39:70:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:32 2025 by rpki-client