Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: CJMFKwl5MbicliAvHpOu5pOdLrg6feIITQLyAMeHhl8=
Subject key identifier: 1D:B4:A2:97:A5:A4:66:CE:84:95:60:3B:2B:36:B4:EB:51:65:E5:83
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 019873741E3EAF6882BF49A36B5231160C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 8F
Signing time: Mon 04 Aug 2025 05:00:46 +0000
Manifest this update: Mon 04 Aug 2025 05:00:46 +0000
Manifest next update: Tue 05 Aug 2025 05:00:46 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: 2vLdJtXRoaSsqwJ7Fyx90HiQtJ7x60rK3uPM0TzZTYs=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1e:3e:af:68:82:bf:49:a3:6b:52:31:16:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Aug 4 05:00:46 2025 GMT
Not After : Aug 5 05:00:46 2025 GMT
Subject: CN=1db4a297a5a466ce8495603b2b36b4eb5165e583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:9c:c2:19:ae:b5:b4:24:a4:c1:16:02:8c:
47:c2:b6:56:7b:30:b3:ce:16:2f:fd:fc:22:7a:b0:
ea:c3:c1:8c:48:66:fc:7b:a6:d4:5e:2b:1f:38:ba:
02:94:0b:a8:49:85:17:78:a1:91:5a:81:3c:9c:1a:
d8:72:eb:a6:16:d3:1f:76:7a:61:b5:8c:9f:bb:fa:
67:71:60:50:09:01:4b:3b:6d:1a:90:6c:38:9d:cb:
fb:89:e6:0e:79:98:27:2b:6b:52:ed:e0:b5:dd:15:
3e:c5:46:e2:12:4f:ef:21:1b:0c:60:9d:9a:34:7a:
ee:51:a8:fe:d0:a3:75:99:50:5f:fe:06:6e:d8:91:
21:ce:f7:31:69:a3:1b:44:8e:00:c7:fc:59:56:56:
74:55:fa:94:d3:1a:76:87:25:c5:0a:75:e2:a0:53:
3b:2e:24:65:94:76:30:92:44:cc:ca:b3:43:00:72:
58:6d:62:c3:c6:32:80:ed:9c:42:17:7a:65:f5:d5:
2c:2a:22:cb:79:9a:f3:61:21:84:9b:d6:0f:e3:28:
ef:02:1f:23:68:12:80:c0:18:65:c9:27:fd:d5:c2:
79:aa:d6:dd:93:ce:72:49:f2:f5:8a:da:29:d1:1f:
1d:c8:56:8e:66:6b:c9:61:50:6f:3c:98:ea:a8:1d:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:A2:97:A5:A4:66:CE:84:95:60:3B:2B:36:B4:EB:51:65:E5:83
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:ed:fe:08:5e:d9:75:d0:08:7a:e4:f1:1a:2d:65:b9:0e:
f6:d0:cb:52:af:b4:6a:d4:0d:00:1f:33:f9:aa:fa:23:88:21:
70:2d:a1:c2:12:54:05:5c:5b:19:6d:78:6d:b6:85:26:40:35:
b9:10:22:24:29:e9:1b:a9:25:dc:a7:f9:ff:90:6a:f0:1a:4d:
62:98:15:6d:63:27:bd:ac:d4:d0:0f:f4:f5:ed:86:36:92:3e:
a9:55:cf:ed:e0:5d:87:98:06:f1:c5:31:46:da:5e:04:88:aa:
54:c0:64:a1:a4:26:0f:7a:5b:84:50:48:28:8b:17:9c:51:02:
99:3d:fb:d2:4a:6f:4e:bc:78:f3:8d:b2:c6:ad:e5:56:65:c0:
fe:84:6c:74:b2:2c:b5:42:7f:18:97:6c:6b:aa:29:2c:91:b2:
61:d5:6a:36:16:5a:24:3b:17:0f:93:12:8a:55:a1:ba:b1:69:
60:73:4b:e0:ea:59:58:78:c0:35:15:0c:9b:0d:a6:a5:0f:46:
4f:8c:bd:d6:96:a9:1c:f9:4a:04:03:d8:5e:a3:c2:31:5e:2d:
ac:b3:fa:ef:60:76:9e:7d:95:cd:90:16:91:39:f5:b2:b3:4f:
ce:9a:67:ea:f7:e2:db:fb:35:21:31:4e:3e:2c:fe:31:2e:c5:
f3:3f:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:48 2025 by rpki-client