Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: q1NeKMgNR2cXX8lBhjNrLlWXcGsqd4cyhs7hgR3EKVo=
Subject key identifier: DD:99:36:FE:9D:49:7F:EE:4C:BD:1A:ED:45:96:44:FF:F5:20:AF:DC
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019874F49AC2158ED42C36A86CEC60DAC323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 12:00:44 +0000
Manifest this update: Mon 04 Aug 2025 12:00:44 +0000
Manifest next update: Tue 05 Aug 2025 12:00:44 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: Dy/PbaWkJJoUo+nYZmpKeNCGhYcYumFIOKH4la0K3bQ=)
2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:9a:c2:15:8e:d4:2c:36:a8:6c:ec:60:da:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Aug 4 12:00:44 2025 GMT
Not After : Aug 5 12:00:44 2025 GMT
Subject: CN=dd9936fe9d497fee4cbd1aed459644fff520afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:2d:ef:03:b4:c4:1c:b8:da:cb:33:6a:03:
10:69:87:e7:e8:68:9d:59:f8:42:db:eb:4e:dd:76:
86:86:52:eb:1c:b8:0a:dd:b9:23:e3:cd:00:f4:d9:
6e:9a:d1:19:ab:a0:e8:14:24:ce:30:09:3b:33:78:
e8:c7:c5:b2:55:41:b9:ff:b7:f6:cc:c9:0e:e1:77:
96:63:18:e2:64:fd:28:40:75:17:83:b6:dd:96:cf:
4b:a4:96:d4:6e:44:26:f0:c6:d5:a7:ca:5e:df:9a:
df:e5:02:74:6a:81:7a:12:c8:a0:16:d6:24:88:9c:
35:f8:01:bd:03:e1:d7:29:de:0c:0f:b2:dd:a3:ac:
67:12:cb:15:7b:34:9f:3e:ab:93:72:c0:b5:05:dd:
76:93:72:78:c6:10:72:5e:61:30:77:f5:ab:46:77:
7b:61:ef:5c:ba:e0:de:45:27:a0:91:06:b3:a4:6c:
27:17:9c:6f:55:4b:56:40:82:17:10:0d:54:72:84:
66:3b:2e:ed:d4:23:bb:d9:2c:f0:6a:d4:61:59:16:
4a:33:c3:b8:d0:59:26:ed:d8:fb:48:a0:f4:9f:36:
10:49:5a:44:cb:5e:17:0c:19:53:02:5b:df:7f:5b:
03:be:91:f9:c9:43:70:aa:77:0f:eb:15:ce:14:aa:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:36:FE:9D:49:7F:EE:4C:BD:1A:ED:45:96:44:FF:F5:20:AF:DC
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0d:0b:13:85:b1:61:b5:ed:fe:52:58:ce:46:89:f5:10:65:
d5:2d:7a:ea:dd:35:a4:81:53:02:dd:69:43:4d:63:b3:02:d3:
75:dc:f3:92:f6:55:ac:95:33:41:6e:5c:dc:89:73:4d:ec:77:
e8:4f:45:18:ec:36:bd:1c:49:84:86:7e:0a:1b:d3:98:57:a7:
e4:22:0e:74:7b:cf:79:51:a1:5b:5e:d9:89:2e:59:c4:2d:c6:
01:71:cb:6f:87:16:e3:65:74:1f:1f:fe:0b:df:0d:4f:a4:d8:
8a:dc:0e:dd:ce:7e:b1:2f:65:4f:18:cd:6f:d3:b1:9c:92:90:
e6:8a:e7:0a:2d:32:a3:fe:ef:af:fc:f5:f6:02:f0:c8:77:63:
f0:c1:4a:86:61:a0:ae:ad:12:0c:33:0c:c1:5f:38:34:12:66:
aa:98:e1:1a:f5:b0:58:01:fc:cf:05:10:c1:1e:4b:5d:74:82:
12:0d:50:b8:10:0b:7b:37:16:cd:2e:fc:11:fa:76:32:7d:ce:
6a:1d:46:4c:8c:a5:05:a7:3c:18:43:4a:74:b3:ea:c3:6f:37:
4f:37:18:d7:c7:ea:06:ec:70:3c:24:83:5a:1e:09:7b:92:a9:
0b:c8:cd:e3:9e:f0:2f:bb:0f:99:94:31:5e:8b:81:5a:7b:8d:
bd:08:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:26 2025 by rpki-client