Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: WmnlfrEIpZSGB1xntBn0ZGsZTjLjLrRnxnTbJweWJGI=
Subject key identifier: 66:FD:B2:83:22:DE:6E:90:B5:F1:80:17:26:27:A5:68:41:47:47:E2
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 01987D1C4C78F1E0DE7B59F5336E1DE80F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0F82
Signing time: Wed 06 Aug 2025 02:01:03 +0000
Manifest this update: Wed 06 Aug 2025 02:01:03 +0000
Manifest next update: Thu 07 Aug 2025 02:01:03 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: U1Q3oUidlx0btF7VyIU4yg2/LH/qH58NXbt/hQZ6Gpc=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:4c:78:f1:e0:de:7b:59:f5:33:6e:1d:e8:0f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Aug 6 02:01:03 2025 GMT
Not After : Aug 7 02:01:03 2025 GMT
Subject: CN=66fdb28322de6e90b5f180172627a568414747e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:a3:4a:43:bf:23:9c:0f:a1:00:0b:1c:c0:
03:0a:60:9f:e7:7f:0e:1e:4a:49:02:d0:56:44:8f:
6d:14:4c:44:29:37:a9:c5:fb:9a:a2:23:46:03:77:
29:85:ee:16:05:64:9b:e0:54:e7:72:5f:46:48:af:
d2:21:8f:2a:74:28:0b:c3:26:20:70:a3:cf:cf:3b:
d3:f5:60:09:58:89:42:a9:14:2b:d9:64:71:71:5f:
48:d5:de:89:13:95:34:3b:37:12:a6:c7:58:9d:00:
f8:03:47:a2:49:71:24:c0:0c:cc:f9:82:28:c6:d9:
1d:8e:df:77:e8:45:c8:58:bc:32:7c:a4:fa:e6:13:
54:2a:46:77:14:f4:cd:6d:22:1a:12:6c:8c:df:b5:
43:1c:fb:8d:35:63:03:51:59:22:68:82:9f:36:bb:
56:cd:9e:24:7c:8e:9a:28:1a:64:98:51:74:20:15:
37:9d:0f:ec:64:8a:41:5b:4a:07:9c:f9:93:a3:b7:
48:f6:c0:88:aa:62:1c:0d:82:9a:15:d2:8f:f3:91:
d4:4f:0d:0d:14:7c:11:99:8d:a3:90:40:a3:e5:d9:
53:69:6f:46:c1:99:7b:87:d1:b2:63:3e:06:95:b4:
d2:59:99:da:7d:b6:8f:47:b7:49:06:f1:b0:06:85:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:B2:83:22:DE:6E:90:B5:F1:80:17:26:27:A5:68:41:47:47:E2
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0f:b6:ef:78:a3:fa:20:cd:b8:81:7d:01:e5:a4:9f:eb:fc:
ef:b5:f0:9c:16:e6:35:ad:96:a6:47:82:8a:fe:af:43:f3:e6:
dc:22:fe:ec:13:5f:38:2b:d3:0e:bd:3b:6e:f6:02:b4:60:b7:
3a:5d:9f:70:c2:0c:80:76:46:06:37:c4:9d:8b:c5:fe:47:a7:
d8:a3:b5:af:69:0b:97:5c:62:68:85:a4:54:ac:be:9b:ca:1b:
c8:3d:98:6a:a5:6c:86:0e:d9:9b:a4:7e:84:19:e3:b1:e0:1c:
62:e6:e6:33:85:a1:13:3b:d2:e5:cc:16:e2:0e:bd:25:12:36:
e7:ba:26:34:b2:39:4d:e1:cd:46:07:e7:d8:68:4a:5d:c4:d5:
51:62:2f:bd:31:0c:fd:a2:78:5c:be:e6:88:b6:c9:72:e5:2a:
dd:6a:46:d7:7f:ba:53:6b:0d:a2:3c:ec:d3:7f:ef:bc:2c:51:
9f:29:d7:45:c5:bc:5d:27:9a:81:88:88:29:d7:bd:c9:cf:43:
84:6f:c9:91:fa:a5:04:e7:a0:cc:b9:47:5c:dc:dd:ae:c9:25:
1c:61:e3:1e:7e:13:99:02:ef:2e:2d:e6:1e:f3:fd:03:9c:8f:
92:c1:ac:4f:9a:64:78:be:ee:67:83:b6:0b:d7:98:90:78:98:
97:d9:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:53 2025 by rpki-client