Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: c+Qb3NS5HX6FaJKaFt9qx9dVE7LQo08bvPL3+iA/A0Y=
Subject key identifier: 21:E2:E0:43:CA:53:13:1A:A3:57:2C:2D:28:B5:B1:E0:33:4C:8F:0F
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 01988E7DA06AE629BB43F6B8DC749C5FBABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1524
Signing time: Sat 09 Aug 2025 11:00:54 +0000
Manifest this update: Sat 09 Aug 2025 11:00:54 +0000
Manifest next update: Sun 10 Aug 2025 11:00:54 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: fooRluhwhJS99BqrqhXNRs/Kx4lbrPJLBY5AtsdGlm8=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:a0:6a:e6:29:bb:43:f6:b8:dc:74:9c:5f:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Aug 9 11:00:54 2025 GMT
Not After : Aug 10 11:00:54 2025 GMT
Subject: CN=21e2e043ca53131aa3572c2d28b5b1e0334c8f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:a1:1a:9c:e9:dc:2e:1f:73:85:05:d1:ec:
68:2a:f1:d8:63:25:b2:ef:b3:e1:00:e4:2c:f4:15:
3b:3a:d1:24:4c:c4:1b:ef:90:d4:2d:04:a2:7c:58:
db:7d:0f:36:2d:cc:41:de:74:c7:53:0e:82:fb:50:
77:ac:d4:17:24:d1:48:0f:73:a4:4a:6b:c9:2c:09:
1f:90:0c:0a:9e:0b:a7:19:b8:5b:37:43:c3:54:8e:
89:cf:4e:7b:49:aa:d6:81:7e:c6:52:dc:da:58:9c:
48:a8:da:fb:6c:c1:f7:5b:43:dd:07:84:ed:e4:0f:
63:d4:a5:06:1a:14:09:a0:64:37:06:d0:f3:0b:90:
b5:4e:28:2a:01:82:8a:a6:de:d2:ca:f0:1d:f6:f4:
3a:62:03:aa:a4:6d:4f:11:05:04:6a:1d:29:65:52:
be:bc:c7:63:a9:95:5d:ed:7a:b3:ac:cf:a6:41:ae:
d3:7d:bb:9c:32:3f:ff:16:62:8e:62:09:28:2d:68:
59:70:a9:9a:4c:84:a7:75:70:95:eb:da:fd:c1:f9:
6a:5f:86:29:4c:d0:c0:bc:bd:d0:1a:c5:95:15:4a:
98:8c:1d:1f:51:48:c9:69:ad:a8:92:3e:56:60:45:
18:cc:3a:29:5f:06:e4:d8:c0:62:de:67:8a:29:12:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:E0:43:CA:53:13:1A:A3:57:2C:2D:28:B5:B1:E0:33:4C:8F:0F
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:01:18:d1:9b:73:a6:40:e1:f3:fb:39:f8:3c:43:e5:38:d5:
78:f9:36:7f:a3:70:91:fa:69:ed:2f:71:93:48:d6:3d:d1:71:
61:1e:89:d3:b2:96:f0:e6:31:c2:3c:c5:21:b1:c5:ea:cd:83:
11:55:38:ad:e6:22:ac:52:aa:7b:5f:e2:aa:1d:9f:1a:b9:02:
96:76:22:22:02:d1:80:b3:30:f5:d2:69:8b:be:82:db:48:a5:
cf:f7:ba:9d:9c:ad:5e:b2:55:f3:3d:4e:d9:8a:0b:02:90:e7:
e6:3e:9c:db:a0:84:51:52:f1:3c:7f:d0:71:3a:d0:22:5e:08:
c4:40:cb:37:a3:fe:e3:6c:78:f1:6f:80:38:b8:7b:49:2d:b1:
b0:84:77:d4:1d:be:ac:65:9e:37:8d:c6:bb:81:d4:03:6e:46:
97:47:f2:08:71:55:2e:cd:7b:1d:5d:83:f6:22:a4:ff:85:c1:
36:2c:1b:74:d7:72:a9:a0:90:78:c1:de:fc:46:10:bf:3c:6c:
2a:b5:fb:4c:79:e0:73:5a:15:f1:0c:e6:61:4b:a9:17:27:05:
a2:fc:11:91:b1:63:7f:ac:d6:48:65:97:33:18:83:e8:2e:e5:
a5:6d:f0:ae:31:56:1d:26:f0:41:32:6f:7f:ff:55:be:65:96:
43:7c:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:15 2025 by rpki-client