Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: mESfUtEQsMyFZJb+AVAaMVi7sGcYMX30DHWKqk21gLA=
Subject key identifier: 7E:C9:89:1B:35:01:D2:AD:9D:43:69:98:0F:F0:F6:74:31:95:0E:7F
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 01987FE72DAF2B6CAA6EC92333D41B700AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 15:01:53 +0000
Manifest this update: Wed 06 Aug 2025 15:01:53 +0000
Manifest next update: Thu 07 Aug 2025 15:01:53 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: aP0+QAZfzjuO5aJSRg3u2PAlNyIWHtFvW6pjx/REQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:2d:af:2b:6c:aa:6e:c9:23:33:d4:1b:70:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Aug 6 15:01:53 2025 GMT
Not After : Aug 7 15:01:53 2025 GMT
Subject: CN=7ec9891b3501d2ad9d4369980ff0f67431950e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:c8:c3:f1:71:8d:fa:37:cc:2e:0b:6f:3c:
32:de:71:5a:97:41:85:3f:03:a4:36:41:22:47:51:
21:3d:47:f2:e7:b5:91:0e:de:56:4a:d1:30:00:f4:
95:09:9b:80:12:27:7b:8d:53:ec:e9:d6:c6:fc:90:
58:eb:fc:04:7f:1f:e2:15:ec:21:ad:ad:54:ff:b5:
81:a9:a5:14:b2:e4:68:da:81:e7:54:77:0f:b8:16:
ef:38:03:06:e3:73:30:76:69:4d:cc:a5:6d:8c:c0:
75:47:b3:11:27:29:0c:b5:2c:f5:c2:a3:a3:6d:b9:
50:86:5d:b8:5a:f8:bd:ea:83:a7:c0:cb:32:93:29:
6f:f4:94:fc:29:73:ae:aa:3f:c0:c2:2a:71:37:68:
68:a7:ba:45:b9:54:03:a6:b5:0a:ea:1f:b7:7f:40:
3c:3c:3b:b4:43:fa:fb:1f:e6:82:2e:52:d7:ea:71:
72:33:aa:06:29:e2:6a:36:c0:ec:91:81:63:39:09:
70:b8:c2:97:3e:21:b1:4b:4d:71:ce:64:84:4c:98:
6a:e8:f2:6a:2d:49:22:4a:bb:a1:91:72:60:aa:3c:
b4:75:8f:47:83:19:87:53:0a:05:3c:36:56:d8:7e:
be:cb:a6:be:ce:ad:e6:5a:d0:ca:96:1e:49:5f:b7:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:89:1B:35:01:D2:AD:9D:43:69:98:0F:F0:F6:74:31:95:0E:7F
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:69:4e:ab:23:d3:15:c8:4b:6b:05:8a:73:37:62:ed:74:fe:
42:e0:a3:85:1d:0e:8b:65:28:86:35:0a:33:fd:ab:45:46:76:
49:a7:e1:a9:89:5e:cd:3a:5c:b3:76:4c:42:af:04:fb:db:2f:
11:98:0c:f2:ac:a5:f8:5f:10:41:33:91:b9:cc:bc:3c:ee:04:
f8:9a:6e:b7:24:71:2f:17:e7:bb:bb:15:43:dd:56:04:63:8e:
b0:11:78:f5:a2:6c:ce:aa:c2:70:33:48:2c:65:71:be:1d:26:
62:68:5e:58:f3:0d:06:86:67:9c:1f:9a:01:cd:e4:49:35:d9:
12:49:49:d9:d8:07:3d:ff:ee:33:c6:6b:f5:67:61:5e:b6:e5:
ab:c1:dc:9d:57:84:80:cf:6f:a7:46:a4:7e:df:8a:23:ba:91:
bf:3e:33:4c:8a:51:a0:dc:c1:3e:93:fe:62:e6:08:5f:75:b0:
55:38:33:05:20:c5:21:61:71:ba:fd:b5:6b:75:a0:00:11:db:
ee:87:5a:28:7d:9e:61:30:5d:8a:cc:53:14:52:3b:4c:e4:a5:
db:57:87:cd:41:d4:87:70:d7:12:c0:e6:12:57:ca:ca:a7:72:
58:bd:9b:ff:8c:2f:16:b6:4b:c3:42:c8:e3:c7:bf:e9:19:7a:
47:cd:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:39 2025 by rpki-client