
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: klz58ZVFdAwrS70+GPpJQ1Blp0Ml7ZrVuQ1/vCUzzVc=
Subject key identifier: A6:D2:F1:52:C8:A5:62:76:FB:B6:31:71:9C:9A:AD:3C:C7:66:BC:04
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0198892169E9DF373E336211895F3A9E6B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1361
Signing time: Fri 08 Aug 2025 10:02:05 +0000
Manifest this update: Fri 08 Aug 2025 10:02:05 +0000
Manifest next update: Sat 09 Aug 2025 10:02:05 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: uAff/lkNjxaFzzfEeCHk6q2b6Mz1x88VbxytBBiGYas=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:69:e9:df:37:3e:33:62:11:89:5f:3a:9e:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Aug 8 10:02:05 2025 GMT
Not After : Aug 9 10:02:05 2025 GMT
Subject: CN=a6d2f152c8a56276fbb631719c9aad3cc766bc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:8b:09:d3:41:a5:67:4b:06:34:d8:2c:76:
c5:b7:56:5c:17:47:f4:eb:a7:be:54:ae:65:86:54:
34:a5:e1:be:e1:43:e8:f8:c3:1d:45:7e:89:d3:9c:
9e:f7:70:44:ce:6e:b3:38:6a:f9:d2:ed:fd:88:b3:
a5:08:cf:36:f3:99:a0:b2:ff:b0:6a:10:d3:d2:67:
ce:c6:03:35:01:29:9d:9d:5f:8a:1f:f2:30:0b:44:
a7:d7:9b:24:e5:ab:fb:84:94:a2:b3:ff:8e:26:ca:
d9:24:81:a6:6f:8e:61:79:aa:6a:d3:5e:a0:d1:88:
f9:95:66:be:6e:f9:b1:8b:2b:1a:2c:6f:96:03:f2:
0b:d7:07:98:94:f7:2b:06:02:3d:a9:b3:64:f2:5d:
25:c5:47:84:25:27:ee:0c:c4:ac:d6:1a:b5:c1:2d:
bc:28:c7:a4:b0:aa:49:21:aa:c2:0d:5d:b0:27:f0:
c2:1b:8c:69:24:cd:d9:5e:39:bd:84:b5:3a:4d:9b:
07:ff:87:55:12:b4:b8:ae:b3:b8:7f:a4:b1:ec:89:
55:16:ed:a5:96:f8:58:ba:45:32:17:2c:07:b2:d9:
4b:a6:0e:3e:ba:78:35:09:93:b6:4e:b5:7a:e3:38:
46:9a:fb:ed:9e:5a:f0:3e:82:e9:09:0e:2b:b5:8e:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D2:F1:52:C8:A5:62:76:FB:B6:31:71:9C:9A:AD:3C:C7:66:BC:04
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5b:69:66:a5:43:b3:24:23:2e:ed:76:0c:0a:87:df:e8:47:
9f:b4:91:ae:86:54:19:89:8d:8d:40:cb:82:a4:30:b4:b6:a7:
64:84:c6:77:0b:12:3f:21:64:75:94:9f:59:52:f4:ac:06:e4:
35:57:8b:55:7e:78:8f:4c:d7:c1:b0:34:3d:27:86:2b:fd:63:
21:e1:e9:47:97:4e:c2:98:20:fa:1a:46:d4:a0:0a:b4:12:e3:
0a:6c:1f:34:a7:5c:20:4d:71:f3:b3:74:ab:3c:0e:69:97:a1:
5e:51:ac:26:b1:c9:9f:8d:1d:86:5d:4d:63:48:53:29:1f:e0:
95:4b:f4:96:a5:82:cb:29:a8:b2:ff:0e:be:ad:4f:6f:3d:04:
65:fc:b1:59:a5:1d:a8:de:a6:99:6e:a4:9a:19:89:98:bd:1e:
52:cc:7f:c3:be:39:ba:f8:d5:04:ad:ed:70:3e:19:b8:93:0b:
f5:3d:ce:ce:2b:db:f5:8c:20:20:df:ea:50:b1:79:25:87:48:
8e:45:70:2a:12:d2:07:68:38:cf:25:03:47:81:25:79:f5:fc:
a4:a7:2b:ed:86:e4:2f:6b:32:28:13:4c:ba:36:07:af:00:c7:
e4:0a:8f:67:2e:94:70:d6:66:99:48:8c:92:ab:79:40:9a:27:
5f:bc:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:00:53 2025 by rpki-client