Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: SJeyd8vHiBBQC2Fy2VtnHI/JW0F7kkA2jKky1xtX9rk=
Subject key identifier: 2B:DA:29:9B:4D:B9:4E:E9:08:6A:60:82:08:5B:01:74:91:C7:FB:D8
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0198733D1E6C90F9026A760E18695CF1D44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0424
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=)
2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=)
3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=)
4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: YjvdOhRM1HBQP971fL1bF+ecxB0fGiVFlabo1tEMgs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1e:6c:90:f9:02:6a:76:0e:18:69:5c:f1:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=2bda299b4db94ee9086a6082085b017491c7fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:4e:03:97:0f:0e:be:80:eb:18:a8:09:90:
3e:3d:e4:37:4c:6b:83:f1:55:93:89:98:78:97:41:
6e:b1:b7:a0:50:f6:7e:da:a0:12:e2:f9:31:16:be:
4d:cd:00:b0:03:9d:48:3b:db:46:05:f9:40:22:e0:
88:77:f3:aa:de:5c:ec:24:71:dc:f1:62:e6:f6:8b:
3e:d7:cc:d7:39:b3:d7:0a:fb:fb:5a:36:35:76:01:
18:4d:78:0f:91:2a:0d:04:32:8d:b2:28:d0:01:84:
be:f0:d4:44:08:c1:86:a0:d9:51:a1:5c:b7:99:1e:
d4:9c:0a:3e:1a:8c:bb:84:8e:39:a6:2c:e0:53:bb:
3e:a2:af:61:ca:96:31:51:62:b5:cd:dc:3b:78:79:
5f:26:9f:08:24:d1:f0:f5:4d:f7:84:21:4d:39:12:
15:90:64:82:ec:43:14:6c:41:5b:0d:b6:61:35:91:
23:34:d6:6c:ba:5b:6e:86:1b:ec:0e:12:15:e5:2a:
85:ec:e7:e2:3f:08:f1:fc:4c:a9:69:58:84:05:f1:
2f:69:18:52:82:28:d4:fa:7c:15:30:aa:c3:42:ac:
c7:6a:92:7b:f2:df:4a:5a:4a:7e:cb:40:ed:70:42:
33:16:08:55:77:6c:64:d1:d6:1f:09:5a:34:01:99:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:29:9B:4D:B9:4E:E9:08:6A:60:82:08:5B:01:74:91:C7:FB:D8
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2c:65:49:50:b5:24:a6:8d:ff:10:29:bd:6f:a9:61:e5:b9:
4a:9d:e2:73:8f:62:2e:61:eb:3e:95:f9:9f:6c:47:c0:9a:31:
c4:08:c0:5b:72:6f:c4:0e:60:12:07:28:4a:35:7f:b5:31:08:
43:31:2e:6e:96:ec:27:1e:d9:1e:0d:06:d0:f8:95:8b:ed:32:
39:e9:7a:82:7e:c4:c0:73:97:19:be:c7:32:09:1e:1e:95:c4:
76:40:65:d0:58:50:7c:4f:b1:62:09:23:4e:69:4c:82:28:28:
f1:89:11:af:56:1d:d3:74:1d:a9:be:ca:4f:e8:22:18:45:92:
8e:a4:4d:e5:22:8b:d8:42:d8:ce:8b:a9:cf:36:a2:8e:b3:50:
aa:7c:72:04:52:a4:bd:4a:b7:d8:13:c6:0e:3a:88:fb:76:7c:
b9:4c:07:50:11:b6:f3:c3:1c:f9:6e:93:6e:e1:62:c7:15:e1:
82:a8:7e:bc:8a:5a:08:57:4e:14:5a:cf:8b:b0:a9:47:ba:62:
8d:09:a7:7c:36:d3:8c:fc:65:c9:cd:98:e3:70:9c:4e:b2:8f:
59:c6:d9:33:d5:cc:9a:e6:a9:e3:b1:b7:98:c4:9c:1b:25:a8:
5a:77:a3:55:05:e6:17:ad:db:7d:0d:f0:10:6e:52:39:b1:c0:
47:f6:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:01 2025 by rpki-client