Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: mp8ldbOvg8mgrQprWP/tAh/Up/JhHmi7nnJFJMaiqaU=
Subject key identifier: FE:E6:C9:F3:05:1E:9C:F7:08:91:97:65:00:34:B0:53:9F:E8:E7:2F
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01988A32B7D8230689C94712DA06F12B3205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 04C7
Signing time: Fri 08 Aug 2025 15:00:36 +0000
Manifest this update: Fri 08 Aug 2025 15:00:36 +0000
Manifest next update: Sat 09 Aug 2025 15:00:36 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: Vrte/TNo+5rBYa7tOdwgZqbIJA2IsCf81ha+HhOKwMk=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:b7:d8:23:06:89:c9:47:12:da:06:f1:2b:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Aug 8 15:00:36 2025 GMT
Not After : Aug 9 15:00:36 2025 GMT
Subject: CN=fee6c9f3051e9cf7089197650034b0539fe8e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:0b:f8:4e:7a:79:e1:ea:c7:e3:c0:db:3d:
b4:73:a2:05:f7:c1:02:43:2a:e1:58:f6:76:d4:d1:
eb:3f:7e:e3:7f:db:e9:8b:60:f5:d2:d1:0b:8e:68:
5e:ee:e4:2e:ea:f4:cf:94:95:eb:27:3a:a1:af:be:
a8:58:5c:3a:15:38:26:3d:45:9a:26:a3:a8:9f:f3:
e0:6f:b9:96:1c:25:fd:38:f2:b0:5d:91:74:a5:d0:
d1:e4:fc:f9:5e:f9:bd:fc:0a:d3:b7:e6:45:21:f7:
09:83:16:f4:ce:e5:d6:09:17:db:d8:ba:59:a0:f3:
08:f9:ad:07:79:2a:dd:6d:93:5e:9b:14:5c:46:37:
ac:96:d1:4a:fe:63:d2:7f:17:86:e0:a3:27:b0:cd:
97:c2:91:41:be:0b:65:0f:36:b0:d4:6d:c7:35:34:
83:0e:a9:f6:0e:af:3f:48:e7:54:86:13:4e:08:af:
d4:2f:71:aa:68:70:96:81:4d:18:ca:e8:a9:ab:e1:
08:f5:e4:32:2a:07:fb:c4:b4:f3:8c:23:21:0f:66:
63:9a:55:4f:1c:fc:1c:15:f0:64:5b:b1:d3:a0:c9:
e1:c3:40:5a:77:82:32:5d:fd:e1:e1:58:6c:4c:b3:
d0:a5:4d:8c:ca:2a:e1:0e:9c:ca:2d:8b:38:75:46:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:C9:F3:05:1E:9C:F7:08:91:97:65:00:34:B0:53:9F:E8:E7:2F
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:71:f2:9c:a9:78:10:f6:0e:07:54:72:ae:fa:64:c1:eb:
28:fb:dd:e3:a1:e3:12:b2:04:6a:64:26:9d:27:37:de:0a:49:
82:8e:61:d2:fc:5b:7c:72:e3:a6:d8:00:ac:8a:fc:23:52:e5:
92:7e:53:d9:6d:85:d2:d1:5c:49:ab:14:f1:55:9c:ff:68:89:
f6:96:cb:33:ec:6c:4d:fa:70:8e:06:92:ce:ab:ad:ea:91:26:
02:6d:9f:91:04:98:a9:38:aa:ea:43:98:43:dc:d9:3f:d6:2b:
20:fb:20:08:d5:0b:5b:c3:6d:d2:da:93:87:5e:c6:ea:91:e8:
12:e7:1a:09:fb:77:07:e1:3d:8d:d7:ff:ae:5c:87:22:79:0a:
f1:65:16:8a:c8:73:fb:34:33:a7:b7:9c:d8:a7:90:ee:cb:32:
c2:ed:44:3b:3c:d8:c9:94:ef:e3:98:e1:73:3f:2d:37:b9:99:
84:97:d9:1e:52:e9:18:d4:0c:86:a7:ac:b8:20:24:9f:d9:8a:
d3:c0:ff:3a:30:7b:0e:da:3a:52:63:eb:f4:b9:e1:e4:92:e0:
d5:e5:20:a3:d4:a1:88:9b:c0:69:12:cb:11:d0:89:8c:ce:4d:
3d:51:0b:12:df:63:68:90:97:27:66:13:b5:96:30:91:e2:d8:
e9:3f:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:15 2025 by rpki-client