Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: fHe3260DmepWv5ENWw4doSwitObOc5JdJt463Qiaa5Y=
Subject key identifier: 9A:6A:A1:A1:B2:EA:B9:BD:62:47:8A:93:A6:92:68:0B:FA:41:6A:43
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 0198A084456A7733DFFCA21501F8408E347C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 0276
Signing time: Tue 12 Aug 2025 23:01:19 +0000
Manifest this update: Tue 12 Aug 2025 23:01:19 +0000
Manifest next update: Wed 13 Aug 2025 23:01:19 +0000
Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: 6IMjyuM4pI1Kr0dlU4K0/GOEkGL6d28cXbc3oZQp7AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:45:6a:77:33:df:fc:a2:15:01:f8:40:8e:34:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Aug 12 23:01:19 2025 GMT
Not After : Aug 13 23:01:19 2025 GMT
Subject: CN=9a6aa1a1b2eab9bd62478a93a692680bfa416a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:11:08:ff:0d:e5:56:a1:eb:d6:f7:49:5e:
29:bd:12:9a:0e:5c:eb:b2:7b:68:c3:38:64:c9:69:
b0:fd:51:6d:81:5f:e7:7a:cf:50:27:70:6e:71:4d:
50:87:c8:dc:e0:da:98:ea:c0:9b:a3:a4:66:f4:55:
82:0f:6f:26:96:03:5d:0f:09:22:77:a1:be:a2:fd:
9a:65:63:15:07:a8:35:40:8d:f8:6f:05:0a:1c:62:
7e:f3:f1:4d:2c:6f:df:31:54:01:f3:b3:9a:21:c6:
3f:ad:f7:dd:ad:ae:59:e6:52:1a:07:a9:82:30:98:
e3:9c:bd:6a:bd:ee:ef:70:3c:cb:43:e6:53:73:f5:
77:5f:9d:e0:ba:13:e7:6a:7f:92:8f:87:60:bc:08:
fc:51:58:c9:94:a6:69:76:59:7e:d3:e0:6e:57:0d:
02:c7:ab:fe:51:96:bd:39:d3:04:36:02:65:f6:b5:
9c:1a:bf:c7:a2:f4:66:22:5a:17:54:83:bd:3c:b3:
40:2f:59:bd:27:f9:07:c1:a9:58:39:20:88:7c:66:
bd:3a:a5:9c:26:2a:7f:9e:34:8b:7f:c5:80:90:35:
75:7b:a0:61:fb:5c:58:3b:af:a0:34:67:07:6b:56:
bb:08:76:51:29:cd:0d:de:e2:24:0c:85:0f:dd:d2:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:A1:A1:B2:EA:B9:BD:62:47:8A:93:A6:92:68:0B:FA:41:6A:43
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:92:ee:3c:0d:cb:54:88:b7:9b:3c:64:fb:05:28:bc:ac:
c4:58:46:b8:c7:bb:2d:12:fe:dc:9f:23:bc:02:a6:48:fd:65:
1e:61:ab:af:4a:e0:37:11:8f:6e:52:6d:87:52:8d:dc:34:78:
37:23:d6:d0:89:ef:e6:08:c6:6d:01:81:01:30:a1:30:dd:ae:
8f:40:a0:38:b5:66:c3:51:c9:5a:68:50:54:4e:b3:10:26:f8:
c5:36:00:c2:bc:e5:ea:08:e4:cf:0f:c0:28:64:f4:d0:54:3b:
d1:d9:b1:71:79:17:48:a6:a6:c8:5c:55:9a:16:3d:c2:71:88:
7f:ae:51:2e:49:41:fb:e6:99:1c:02:59:98:47:92:4a:b1:e2:
c6:c6:0c:11:91:11:a7:49:e5:db:5b:cd:88:04:e6:2a:47:7d:
93:d5:e9:30:6c:fc:74:6b:a6:a5:a2:ba:bc:7a:06:24:43:79:
b4:4f:73:c8:26:77:42:57:20:dc:1f:38:68:49:be:42:23:a0:
c8:4b:72:3b:d2:c9:e5:d6:52:9e:ba:f5:d3:c1:e3:ef:37:d1:
b3:08:7d:fa:71:32:ec:fc:8d:a4:72:09:04:a9:31:13:a1:80:
0b:91:26:7a:53:d5:61:b2:91:8c:41:9a:49:0a:c9:3f:32:55:
31:f7:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:34 2025 by rpki-client