Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: Upywn+Qy05BzJ1sGVm0BsHaYe8bhFk/nI3u562Zom9Q=
Subject key identifier: 4F:AC:D0:5E:2C:D2:0D:E3:53:D2:67:15:12:64:A6:33:E0:5A:D9:B3
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01988BB356ED6DE66F3B19E532147921FE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 03D1
Signing time: Fri 08 Aug 2025 22:00:42 +0000
Manifest this update: Fri 08 Aug 2025 22:00:42 +0000
Manifest next update: Sat 09 Aug 2025 22:00:42 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: umC1RxvGclJFTwVLHaTg1/iLLevRWaArgkOhd3g/iDw=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:56:ed:6d:e6:6f:3b:19:e5:32:14:79:21:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Aug 8 22:00:42 2025 GMT
Not After : Aug 9 22:00:42 2025 GMT
Subject: CN=4facd05e2cd20de353d267151264a633e05ad9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:0e:be:68:6d:06:73:1f:b4:04:0f:49:5d:
4f:72:f1:a8:b3:3e:cf:fa:80:62:c6:0e:f6:0e:ed:
3f:1d:be:b5:eb:96:ef:47:83:8d:fd:21:ed:8f:3e:
70:ed:3a:7a:a7:2d:d4:bf:28:23:f9:97:31:72:dd:
a7:a8:9f:10:72:95:a3:d7:03:e1:45:c1:6a:5b:33:
cd:5a:ff:43:40:2c:9c:e6:20:d6:75:41:6d:50:c2:
a1:eb:1a:cd:7a:69:26:e8:25:66:23:ce:05:a5:5e:
7a:cd:72:0d:19:e3:e2:19:ca:19:bf:d7:dc:c2:d7:
72:b1:f9:91:ca:47:ed:98:f5:5b:36:ff:7a:65:4d:
2f:28:bc:6b:46:83:df:16:ad:7e:40:2f:ce:bd:8f:
5e:8d:51:0c:4c:f2:3e:77:f2:b1:7d:82:0e:83:46:
47:c4:0f:98:22:0d:24:ab:0e:2a:c9:0d:87:31:3f:
96:a8:d2:37:2f:d8:b7:0b:7e:21:e9:a2:c8:8b:14:
84:15:ce:6b:7a:d6:2a:5d:bd:af:c8:73:2c:bb:52:
f3:1e:74:43:65:0f:33:f0:c1:9b:63:14:6c:3c:0a:
79:60:df:9c:08:f1:f4:27:b2:3e:6d:14:2b:dc:c8:
a1:95:22:dd:6a:4e:8a:b6:c7:6d:d7:27:8a:b1:3b:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:D0:5E:2C:D2:0D:E3:53:D2:67:15:12:64:A6:33:E0:5A:D9:B3
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:20:61:d2:78:47:d1:14:3c:95:e8:8f:68:a2:f1:61:16:c8:
c2:b9:1c:b9:74:f9:3f:29:b4:85:35:bd:df:f5:9f:5c:9f:88:
18:a8:f1:4a:e7:ec:9f:51:62:50:0d:6b:93:cb:c4:df:be:e3:
e6:b3:57:bd:64:37:d7:05:9c:7e:9d:7a:fc:26:47:73:5d:0c:
1a:01:80:ce:ac:43:27:9f:f1:2b:fb:a9:bb:a4:b9:9e:2d:75:
54:aa:d5:66:bd:d1:7d:78:d7:a7:d6:13:8e:eb:49:62:08:55:
2f:37:50:b3:5a:b9:53:a6:fd:59:ae:37:9e:f0:d3:ec:49:36:
5e:e1:2a:8e:0a:ef:56:68:c9:2a:8e:20:5e:aa:54:12:a4:6a:
33:59:9d:58:c4:6a:24:5e:e0:4b:52:f9:3d:2f:ef:b7:a6:1b:
95:c9:86:e0:48:7e:5b:35:ee:fe:4b:f6:fc:19:fe:0a:bf:56:
33:5a:2b:c7:9e:70:3f:86:aa:f6:2e:b6:43:ae:05:2d:f4:1b:
0e:27:e3:b6:04:d0:9b:60:a8:55:09:e2:2b:cd:c1:20:55:e7:
91:1a:fa:eb:ff:1a:a0:a0:bb:d6:48:5e:c9:2f:a6:7e:8c:b7:
89:d1:f8:9f:64:71:e7:25:bb:69:af:4c:c3:ea:73:30:ac:41:
cf:8e:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:26 2025 by rpki-client