Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: PLdy8gEnzzqXN4tw4O99wiEMWDmsdtC7+tX0bZ/637A=
Subject key identifier: 1A:32:57:FB:6F:76:90:C7:42:91:1E:DA:F2:38:EA:8B:A8:93:1E:12
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 01989FDEF7D932758206867F4D786FBF64AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 15E8
Signing time: Tue 12 Aug 2025 20:00:46 +0000
Manifest this update: Tue 12 Aug 2025 20:00:46 +0000
Manifest next update: Wed 13 Aug 2025 20:00:46 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: wLjFfbiP+5DwB1Y5zBcfYu9gIifvwRo7i4gHHax3lgo=)
2: J3l5rSoC85N4xAXm2HxvLusDt_A.roa (hash: jgHAZqarPBwPQhS0mFPS0Zo6XKz3AtLQwgXQdr9WvR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:f7:d9:32:75:82:06:86:7f:4d:78:6f:bf:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Aug 12 20:00:46 2025 GMT
Not After : Aug 13 20:00:46 2025 GMT
Subject: CN=1a3257fb6f7690c742911edaf238ea8ba8931e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:09:c4:8a:90:6d:42:a3:1f:7a:8a:03:b8:
9f:b1:71:bf:c0:71:15:f3:d6:61:bb:2b:44:a8:91:
53:1d:ec:dd:6c:84:2a:41:64:27:be:d9:b3:cb:cb:
fe:ee:3a:fe:f1:55:c8:9d:df:8e:e6:8c:f1:f6:3d:
5d:84:76:cd:04:7b:cf:7a:54:c2:b3:4c:93:4a:c5:
b5:7c:33:87:cd:ba:a1:d2:6a:51:6a:11:13:77:8b:
0d:af:47:c0:1e:59:37:40:df:7e:fa:26:b5:78:bb:
a2:aa:b0:c9:23:ca:c8:89:e1:9e:12:e1:dd:c0:79:
ae:49:c8:44:a7:e5:78:a4:3a:26:31:80:ec:b1:81:
03:67:eb:fe:4d:b8:c4:9b:a0:dd:ac:77:cd:e2:14:
2e:fb:ec:09:04:4a:93:17:e9:da:c5:78:08:3f:10:
5b:40:4b:ff:83:ab:5c:12:6f:2f:02:98:57:24:51:
30:86:88:84:f6:dc:3f:e3:af:5a:4c:38:d3:23:03:
c0:ec:09:1c:33:81:4a:8d:5d:53:b1:0c:8f:3f:d9:
09:9e:e3:ae:ff:9d:de:ae:f7:23:14:f5:d7:64:60:
d2:21:32:62:7c:a1:17:bc:d6:6c:ef:41:9f:9a:5a:
60:df:f5:88:2d:84:4d:a5:9c:bd:77:ed:d6:1a:bc:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:32:57:FB:6F:76:90:C7:42:91:1E:DA:F2:38:EA:8B:A8:93:1E:12
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:02:4c:b9:e7:8d:a1:b5:6c:50:5e:08:ed:24:c8:5e:c8:
52:a2:af:6b:be:c8:27:eb:8b:b4:7e:eb:1a:fa:d5:36:4d:4d:
c8:4e:8c:d0:ea:36:4c:20:a1:46:97:5c:73:1c:70:2e:ad:d4:
d7:a3:ee:2e:93:52:a3:0c:6a:f3:7a:5d:6c:d4:87:5a:32:c6:
44:26:4b:76:37:a1:7d:a3:ba:3a:1d:bb:b5:c7:67:d7:35:1f:
95:94:80:c3:54:0d:c7:8c:0d:1a:97:f2:30:88:ca:0d:bc:54:
f1:d1:84:0f:0d:6e:39:61:ca:22:83:0e:df:b3:c3:64:47:f1:
3e:6a:f2:6f:f1:36:91:ff:82:8c:d3:16:ee:ed:19:86:c0:48:
29:f8:fa:b4:d8:d0:c6:35:63:66:2f:a7:30:fd:1a:7a:8b:06:
ad:c5:af:b9:3a:d1:eb:8d:24:f4:1c:b3:44:5c:ed:17:ca:9c:
f1:12:55:0f:0c:8d:d7:ad:9b:38:80:f5:96:e2:69:e4:75:8a:
2e:85:d9:f2:51:3d:23:58:12:f2:f5:ae:ea:61:87:ed:ba:aa:
bd:8c:b5:6e:0e:43:11:7f:cc:dd:54:ba:a2:26:f6:af:55:59:
fb:48:a6:83:ba:26:2c:75:80:28:80:c2:78:09:4c:fe:d7:27:
60:07:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:08 2025 by rpki-client