Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: +X56ErcT6MxRPPRSXzuX3Exjxr7PqCa/LfVgIHtjTZ4=
Subject key identifier: 24:B1:64:1F:BD:AB:48:4E:1F:20:46:60:FE:B3:74:A2:5F:C3:BC:B6
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 019893DA8548A986634C0E08A1285C3B42E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0A72
Signing time: Sun 10 Aug 2025 12:00:28 +0000
Manifest this update: Sun 10 Aug 2025 12:00:28 +0000
Manifest next update: Mon 11 Aug 2025 12:00:28 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: l+ak9cRrm0A4c3DH+2wkTOlVvOFEN7swkOnL/hHHHqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:85:48:a9:86:63:4c:0e:08:a1:28:5c:3b:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Aug 10 12:00:28 2025 GMT
Not After : Aug 11 12:00:28 2025 GMT
Subject: CN=24b1641fbdab484e1f204660feb374a25fc3bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a8:52:a9:18:5d:d9:68:bd:3f:07:a8:71:b8:
33:3b:35:33:f2:dd:92:75:82:3f:a2:09:c5:e6:5f:
5e:89:52:3f:77:b3:5c:b7:4c:40:42:b6:89:1b:e3:
0d:57:22:f2:b3:7a:94:c8:53:a5:4b:80:21:63:26:
c0:db:e3:ae:70:5c:4b:d9:7e:46:97:9a:6c:4a:65:
85:da:e4:88:d6:64:d3:23:d9:fe:fb:78:99:d0:c5:
ed:cc:c6:c3:2f:73:7b:f5:96:c7:f2:1a:4f:d9:ba:
99:c0:ae:b3:f9:fe:a2:49:61:43:d1:33:83:37:ee:
9b:28:dd:04:e4:5c:72:eb:c8:7b:7f:99:91:91:6a:
89:93:91:8f:44:dc:86:25:83:e7:f6:4b:b1:27:88:
5a:7e:55:b0:3e:9e:d1:ba:53:44:42:b3:79:f1:ca:
51:ee:35:fc:1b:ce:d0:9c:56:c8:6b:53:dd:59:49:
c7:da:fa:1b:e0:1f:9e:51:b0:4d:70:b3:34:1b:1b:
e4:7c:ae:3d:2f:f3:39:54:e5:8b:64:88:c0:87:2b:
58:fd:66:35:2d:39:21:15:ef:09:e3:20:ea:e4:68:
c4:f4:05:81:aa:b9:be:05:c9:f9:fd:9f:81:5d:cf:
ed:25:92:8a:a6:9f:73:d7:6b:96:da:bd:f4:8d:32:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:64:1F:BD:AB:48:4E:1F:20:46:60:FE:B3:74:A2:5F:C3:BC:B6
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:d7:a7:84:29:71:c7:29:96:23:27:f4:8c:e2:84:d8:80:
21:00:44:09:fd:d5:53:a9:f7:7b:b2:d7:ac:9d:85:be:c6:9f:
d1:ed:9a:16:4a:ae:c5:49:6b:9c:fb:ce:c0:3f:76:eb:4f:54:
dc:ad:c0:3d:58:6e:fa:e3:fd:dc:c4:e6:d1:cc:27:e5:67:da:
26:3b:13:24:2b:ef:54:1a:76:07:b6:d8:00:6c:47:80:d7:88:
9f:b9:37:5b:fc:35:c0:19:45:15:14:12:9e:e9:c4:d1:6a:8e:
83:81:05:5f:dd:e6:a8:33:57:78:72:fa:e9:bc:0f:f6:f1:3b:
08:bb:10:26:89:c2:df:c6:2d:5a:4d:a2:af:9e:79:fa:97:df:
e4:7e:c5:0d:f6:0c:33:13:64:ea:c7:4f:9b:2a:b1:17:20:91:
38:fd:66:a6:d0:ad:94:bf:f2:78:40:8a:3e:4e:e0:fe:82:fd:
51:d8:d1:e5:34:e9:52:9c:6f:19:1e:16:f9:34:7a:67:d8:1a:
68:96:6e:19:a9:c4:56:45:b5:68:cd:77:e8:92:f5:fb:ae:bf:
9d:93:4e:4a:03:df:95:0e:a5:46:00:87:a3:76:3e:90:9c:8e:
c0:ab:67:67:24:f2:ea:69:70:b0:58:c5:35:eb:25:bd:a1:04:
6d:9f:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:55 2025 by rpki-client