Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: 67oFKupVRaLPq44ibxv4ijPwUsevKfSIp398Taxb7F8=
Subject key identifier: A1:03:B3:1C:16:59:26:53:B6:92:42:DF:DA:E2:66:C5:35:83:1D:3F
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019883FA61196A0CC7253D42137D8AC6A3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0227
Signing time: Thu 07 Aug 2025 10:01:20 +0000
Manifest this update: Thu 07 Aug 2025 10:01:20 +0000
Manifest next update: Fri 08 Aug 2025 10:01:20 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: yNv9HYZ6WemwPBV4HczCBPPRMAPAYI1m9dU8LVfLrE4=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:61:19:6a:0c:c7:25:3d:42:13:7d:8a:c6:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Aug 7 10:01:20 2025 GMT
Not After : Aug 8 10:01:20 2025 GMT
Subject: CN=a103b31c16592653b69242dfdae266c535831d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:bb:62:be:e7:95:86:16:d9:fa:74:ca:d6:
5d:22:0f:b6:a8:d8:f7:4e:25:bd:8a:38:e9:07:33:
8b:23:a1:9f:1b:d6:79:6c:4f:ca:08:e1:4e:b8:d2:
6d:e2:34:ac:5e:75:68:9d:2c:5f:4f:d7:b4:91:d9:
77:9e:76:51:b5:cf:45:a2:ea:25:19:61:72:56:3a:
5f:ec:18:84:95:eb:d5:ff:bc:aa:5c:59:ee:fe:50:
8b:59:67:93:d3:ce:14:36:7f:59:b6:34:0f:03:f0:
61:eb:15:d4:19:9b:05:02:56:ef:67:b4:1a:39:4a:
c4:da:aa:26:dd:48:e8:c0:0d:e2:91:04:9e:04:16:
73:29:ee:60:74:d3:64:65:f2:19:e5:7f:1c:28:d8:
64:46:b1:43:1c:7f:f4:ed:15:c7:20:ef:58:8f:17:
a7:6c:01:f4:80:d2:f0:06:50:2d:bb:62:35:02:f1:
26:ee:2f:d4:e4:2f:ff:48:18:61:55:37:1c:21:e5:
a6:06:0d:15:4d:5e:20:35:5d:68:1c:1c:84:47:5f:
74:3f:03:d1:92:bf:91:55:4a:9c:08:61:2f:f4:91:
09:3c:53:35:52:c2:b2:6f:41:eb:46:e7:86:40:77:
d2:bf:6d:ce:95:d0:8d:cc:1c:fc:a4:5d:d2:b4:6a:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:B3:1C:16:59:26:53:B6:92:42:DF:DA:E2:66:C5:35:83:1D:3F
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:a8:87:c1:b8:58:70:a2:7f:65:94:38:72:4f:ba:2f:8f:
d9:62:f4:18:65:69:f7:26:46:b5:85:5d:81:64:71:46:ef:84:
71:18:40:49:d1:77:b4:68:a6:7a:7b:6d:b3:4f:dc:a1:34:f4:
af:27:ea:0e:90:f2:4b:b1:b1:43:79:de:ba:cc:eb:0a:b0:95:
ac:06:1a:1f:c3:18:89:fa:31:f3:d4:3e:c4:f8:26:71:7b:82:
b9:c4:f8:8c:22:98:c8:6d:d8:05:3d:46:5b:a3:fd:7e:87:8b:
71:ea:9a:b9:2a:a7:db:f1:72:2c:48:ed:bf:63:1d:16:4b:14:
b1:66:0d:c4:2d:82:ae:cf:37:3f:d4:51:34:32:1b:ff:5d:b9:
d3:f3:ea:a8:f8:17:a8:1d:dd:49:6c:15:06:41:d1:dc:f0:f9:
9b:76:2a:9f:c8:43:7a:ca:1e:cd:0e:af:62:d4:55:c7:51:57:
95:69:2e:f9:48:0c:94:61:33:b4:f9:be:79:f3:33:6d:fd:a2:
a8:d7:59:b0:80:8e:cd:47:10:49:6c:b8:c2:c7:ed:10:13:bf:
3e:0c:33:8a:67:fb:38:c0:a1:7c:d0:d8:88:75:0b:96:24:f1:
1e:80:6e:2f:c0:fd:91:83:12:23:b2:f8:dc:8f:8a:96:28:c5:
3b:28:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:02 2025 by rpki-client