
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: MdSeQ2cUz5cveVzVwJqWnnVJAz9Sd8/rekueyIpHR3k=
Subject key identifier: 8C:69:3C:D6:7E:F7:2D:E4:BA:F7:B2:02:0C:C4:7C:CF:05:1C:D3:46
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 01988B0FBD4F9C64AA946D86F73E390A8A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 19:02:00 +0000
Manifest this update: Fri 08 Aug 2025 19:02:00 +0000
Manifest next update: Sat 09 Aug 2025 19:02:00 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: DnTiivCepvtwuX8aXtJmxZo4tY2tBGuMdlcCqhTTkyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:bd:4f:9c:64:aa:94:6d:86:f7:3e:39:0a:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Aug 8 19:02:00 2025 GMT
Not After : Aug 9 19:02:00 2025 GMT
Subject: CN=8c693cd67ef72de4baf7b2020cc47ccf051cd346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:54:a5:49:cd:53:3a:2d:38:ab:5d:08:fa:
aa:a9:b0:7a:e2:14:c0:3b:da:9b:55:28:fc:c7:88:
55:ae:d6:04:b1:36:38:24:55:49:69:a9:b0:b8:af:
0a:2a:de:89:ec:01:f2:d1:d8:e1:ed:5c:a0:20:ae:
a8:17:78:ee:f1:ce:42:62:64:2f:c8:ab:ae:eb:a3:
63:ac:13:11:5c:2c:82:bf:d3:85:11:1d:e7:66:3f:
33:64:24:62:e3:aa:9f:13:32:6a:69:fd:4f:ec:60:
2e:88:d0:9b:1d:76:85:9d:a5:05:28:c9:46:f7:4d:
75:21:d7:19:eb:19:17:4d:44:cb:68:70:b4:7e:0a:
5c:45:0e:12:86:86:57:07:a6:7c:e0:91:8e:6f:3d:
f6:f9:e3:f3:f0:f3:44:7a:a3:c4:83:84:f2:f1:23:
87:e8:94:44:99:49:29:de:d6:c7:a9:ab:e5:19:6c:
a1:50:13:3f:15:83:8a:21:4f:ae:42:15:d5:31:e9:
5a:74:87:b6:88:95:62:00:7b:73:cb:08:26:a5:91:
00:b9:0b:4f:4b:d5:37:a3:c9:83:57:54:fd:7f:bd:
9c:62:ec:5c:69:10:b1:13:ac:ed:db:77:4e:fb:4c:
32:06:a7:78:9a:62:76:69:4b:93:0e:5a:82:67:59:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:3C:D6:7E:F7:2D:E4:BA:F7:B2:02:0C:C4:7C:CF:05:1C:D3:46
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:6b:ce:b5:60:db:14:cb:3a:80:5c:63:86:e1:3f:e1:90:
71:af:e8:ba:58:47:2c:69:f4:ca:1e:76:9e:88:49:d5:12:09:
c5:8e:a8:ba:01:08:00:df:25:63:a5:8b:2e:52:15:a7:db:84:
6a:ad:3d:50:aa:5f:c1:56:5c:83:62:f5:17:d7:a3:d6:db:84:
cc:e6:32:e1:7c:d9:2e:38:68:28:36:81:3b:c5:3e:95:d9:3c:
74:85:77:28:49:df:d5:23:dd:61:f2:66:f3:d9:73:0c:9f:7e:
d6:e6:37:f3:fe:88:44:a1:76:38:e6:45:fc:78:eb:70:5a:06:
0e:f3:fe:62:ad:4e:1e:52:2d:c0:a9:dc:cf:8e:39:5e:43:4a:
14:2b:c6:1d:db:17:5b:f1:07:2f:dd:6f:63:75:fe:e7:3e:6f:
ef:a6:5f:ef:15:61:fd:55:93:03:b2:a4:b3:5c:47:13:2b:c4:
98:a2:23:fc:a7:ca:5b:9e:67:e9:a2:55:90:ed:00:44:69:8b:
a9:ac:15:0f:61:17:cb:81:aa:4e:a7:8e:4f:ea:18:57:b6:f6:
3e:40:dd:f1:5d:cf:2a:2f:a4:41:6a:18:40:11:dc:2b:43:6e:
81:ad:87:c9:7e:1f:6c:85:c0:5c:b3:10:fb:75:01:57:8a:72:
d4:17:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:56 2025 by rpki-client