Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: HRtjFFK+DNveFoQ0C3tGZjpmXDLgRm1J7PtlrPfHEd4=
Subject key identifier: 8A:E9:C4:15:99:0D:B6:C3:6F:CA:8E:50:56:B8:BC:FE:A4:99:06:9F
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 01987D1C65644C8DD994E2B021D02B790CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0D01
Signing time: Wed 06 Aug 2025 02:01:09 +0000
Manifest this update: Wed 06 Aug 2025 02:01:09 +0000
Manifest next update: Thu 07 Aug 2025 02:01:09 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: W2uh8K0lrKA9u4GEY4DiQchS8wK3pzGUjUP3mOgKM4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:65:64:4c:8d:d9:94:e2:b0:21:d0:2b:79:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Aug 6 02:01:09 2025 GMT
Not After : Aug 7 02:01:09 2025 GMT
Subject: CN=8ae9c415990db6c36fca8e5056b8bcfea499069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:00:e8:50:95:9c:d5:5d:b2:58:eb:4c:dc:
dd:9e:12:67:5e:2c:3b:aa:dc:06:45:19:01:6b:cd:
78:74:9a:40:a7:f8:f6:6a:26:4b:27:10:c6:81:9b:
55:ac:b6:cc:2e:ba:41:5c:26:40:bb:d2:ad:3b:be:
76:c2:b0:59:91:ef:50:22:66:75:ef:63:fe:00:bf:
da:fb:57:67:50:fb:91:bb:28:5f:d1:9c:a2:6f:87:
54:fb:28:2a:53:11:4f:12:03:58:1d:52:4f:3f:bd:
9c:10:5f:5d:b3:2d:8b:40:e1:85:fa:59:21:77:a0:
8f:b0:ee:af:b7:78:a4:46:33:ab:f1:89:54:6f:33:
43:75:f7:f3:42:5b:7e:bc:28:f7:04:66:1e:b3:6c:
aa:95:e9:89:f6:6a:71:aa:d8:aa:27:80:61:d3:df:
d3:e8:43:78:d1:c5:b7:07:f2:56:a2:35:a7:98:c8:
ed:21:34:95:a4:78:24:80:9a:75:ac:bf:b2:ef:18:
17:72:0f:1d:5e:c2:7d:44:7e:28:21:31:e0:b2:b7:
96:61:9d:01:ce:b3:3c:23:92:51:e9:38:47:9b:35:
b5:b1:67:79:b8:01:81:80:b3:23:f3:d0:95:e6:15:
71:87:23:80:71:2c:8e:26:c0:6c:ea:22:92:90:6f:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:C4:15:99:0D:B6:C3:6F:CA:8E:50:56:B8:BC:FE:A4:99:06:9F
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6a:53:50:fd:8d:3e:58:68:de:0b:36:62:6e:ba:2b:ee:80:
0c:d6:43:72:50:c1:e8:ff:b7:ea:05:ad:e1:24:5e:16:4d:19:
7d:a6:1c:a4:f9:d6:a9:2b:f7:a9:bd:17:3a:fc:8c:1f:cb:3e:
b4:29:5c:09:c7:71:00:d0:73:30:82:26:09:0a:c9:f4:d3:42:
8f:4b:95:bc:fc:01:7d:18:03:95:05:9f:d1:84:34:73:1d:ff:
40:a3:58:e3:09:38:19:58:1e:a0:39:4a:18:19:67:e8:3b:aa:
dc:58:76:30:be:31:ea:41:f2:18:fc:a4:10:4c:2b:e3:1b:5f:
6c:bc:21:3a:f7:73:60:e2:65:61:5d:5b:fb:ed:05:00:7c:e5:
ec:17:d8:16:22:10:cc:48:db:1e:91:7d:38:bd:ef:08:60:72:
1a:60:75:33:4d:38:be:cc:d4:a2:04:51:e0:a8:e1:4c:c8:0d:
ce:f2:17:20:1c:47:14:d4:fb:8f:2a:50:d5:14:c4:e4:2c:6a:
47:fd:a2:65:bd:e3:86:e2:ef:62:a6:7d:9e:75:35:ff:c5:ad:
87:81:82:e2:27:47:04:3f:97:73:ff:37:27:52:ee:4f:c0:90:
5f:90:32:ab:e3:f4:dc:3a:17:7d:50:7c:dc:7d:c2:ec:c6:e8:
a1:b2:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:55 2025 by rpki-client