Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: FTho7ndweujO7FxfO5I7JCXvFGl4Nh1c0b4Gr4tvCHU=
Subject key identifier: 77:F4:BC:04:C8:90:EC:99:45:2B:30:27:4A:CF:53:D8:C3:E1:58:91
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 01988B7CD8FC3F7DD22D1F3232F52FCE0627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 014B
Signing time: Fri 08 Aug 2025 21:01:11 +0000
Manifest this update: Fri 08 Aug 2025 21:01:11 +0000
Manifest next update: Sat 09 Aug 2025 21:01:11 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: DHl9oCai6oxtwFXW+jWzDTdrRrsM5dJItUTFeRYqIAs=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d8:fc:3f:7d:d2:2d:1f:32:32:f5:2f:ce:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Aug 8 21:01:11 2025 GMT
Not After : Aug 9 21:01:11 2025 GMT
Subject: CN=77f4bc04c890ec99452b30274acf53d8c3e15891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:1d:04:5f:25:fa:97:9f:63:16:8a:86:b2:
ed:27:ec:3c:13:19:10:83:8f:c4:a5:a3:af:f1:d8:
d5:3e:0c:86:b5:06:ef:9a:0a:08:bd:50:5c:df:5e:
a6:16:47:72:79:e1:cc:b3:45:5e:9e:50:dd:c9:76:
e7:02:d7:c2:24:76:e7:04:8d:48:fc:ae:bf:79:9a:
03:f1:41:db:e0:34:1f:29:9d:c6:58:85:7a:ab:5e:
95:33:80:34:3d:35:9a:04:c6:e3:fb:ef:c7:10:77:
e1:6a:19:40:18:ef:5b:ca:b7:21:61:97:5c:70:40:
01:75:bf:01:89:7a:0f:a1:09:89:54:db:17:76:61:
76:0e:1e:a8:20:f4:07:ea:8a:6a:af:c5:6c:37:91:
98:df:99:7e:ce:b2:09:61:74:c6:91:75:14:ad:e0:
9e:eb:1f:70:b2:fb:b8:48:2b:c0:6c:82:49:15:21:
85:8c:da:e9:7e:5f:7a:c0:03:61:f9:48:32:dc:13:
8a:95:c5:02:71:97:07:0e:ee:c4:6e:fb:94:72:e9:
33:9f:5a:7e:cd:b7:ce:ce:82:54:46:94:e6:84:4f:
6d:20:1f:0f:f7:c7:38:f4:d7:63:4d:86:41:37:bf:
71:1d:08:a4:83:c6:4b:7e:c1:45:07:86:83:0a:42:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:BC:04:C8:90:EC:99:45:2B:30:27:4A:CF:53:D8:C3:E1:58:91
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0f:50:b1:21:f7:a2:41:28:df:ef:a0:fc:89:90:8c:ae:b6:
2a:4d:3c:80:8d:7f:e4:e3:93:11:08:3d:21:74:d2:0e:e4:d6:
ae:f2:ef:f3:b8:5a:fe:41:df:d4:79:6c:34:74:8e:b3:d8:c8:
03:f9:5e:5e:ac:39:2d:17:27:f9:04:41:5b:7e:27:7e:61:94:
94:b3:48:d2:1c:fa:06:46:4a:84:6a:9c:21:2d:ee:c6:4b:4c:
1e:d2:58:39:ad:65:00:84:88:99:ae:4a:90:8d:72:cf:d5:62:
de:75:1a:3b:54:b0:79:b5:00:54:fe:10:3e:56:4b:8c:3b:38:
ff:ce:0e:98:3d:6a:97:db:7a:bc:db:e1:20:0b:a0:e3:da:7b:
ac:f9:70:f2:aa:2a:51:d9:6c:47:50:ec:9b:46:93:0a:53:af:
d3:f2:6f:c6:dc:ac:3b:68:fe:09:9b:19:f1:20:13:38:60:18:
b7:d1:7a:3d:1c:10:00:31:bf:1b:7f:04:06:b6:40:d2:52:26:
67:3b:d2:53:40:ea:82:3b:ed:44:6f:99:cf:6c:9d:89:9e:8d:
be:f7:b9:1b:f2:db:9c:f5:7d:66:6a:03:87:02:a6:af:a4:af:
92:ff:0a:78:78:d4:da:a6:e8:3b:3f:03:6b:e2:03:4e:8b:f7:
6c:ed:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:38 2025 by rpki-client