Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: SJHLXHREXfv15XssMZPQzaJXcbN+D8sjPnNYCVtQd3M=
Subject key identifier: 6B:21:B7:88:0F:01:2E:CA:CE:FE:9E:CA:A0:DA:4F:4C:AD:B5:73:F3
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019895C90990CFC5984A3F0498676609FA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 144B
Signing time: Sun 10 Aug 2025 21:00:37 +0000
Manifest this update: Sun 10 Aug 2025 21:00:37 +0000
Manifest next update: Mon 11 Aug 2025 21:00:37 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: KIuDTH0X+LtTaGKX2u0a35uNWwrbwLm7jyXw9T+kgoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:09:90:cf:c5:98:4a:3f:04:98:67:66:09:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Aug 10 21:00:37 2025 GMT
Not After : Aug 11 21:00:37 2025 GMT
Subject: CN=6b21b7880f012ecacefe9ecaa0da4f4cadb573f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:4d:a8:02:4b:32:cf:9d:ba:4b:ea:fa:5b:
74:b0:8e:1d:3d:85:e4:23:49:b7:46:b6:1d:eb:68:
c2:19:81:a4:6d:ce:4c:10:5a:d2:9a:b1:7c:54:b5:
30:29:25:de:94:d4:c8:6c:6d:7a:43:30:b9:4e:35:
36:09:6f:ca:06:b5:b7:a3:ee:b7:cb:b7:7d:b8:7f:
3a:2a:86:3a:0f:a1:e4:f9:c3:d0:fa:bb:f2:78:d0:
27:f3:4d:80:1a:1d:de:ea:d3:f4:2e:4a:cf:bc:be:
e6:7c:e5:2a:97:67:8a:b4:4c:a9:c3:03:f9:41:b4:
32:e5:8c:44:81:8f:52:1d:93:88:e2:a3:05:fb:e5:
83:5f:de:0b:f9:66:60:0f:06:e4:ab:4b:dc:ec:f4:
4f:8a:68:b8:05:85:d0:94:54:9e:33:64:14:87:9a:
d4:f8:4c:11:f0:cc:80:84:d4:b2:a7:ed:24:ec:33:
03:9f:eb:31:90:79:b4:3e:84:8c:ae:45:93:9b:2e:
21:40:84:7d:6a:33:c4:ae:82:ab:c8:cf:31:24:84:
fd:3b:08:1c:c2:bd:ca:aa:31:49:9c:00:e0:d5:6c:
91:1a:36:ce:8c:2a:c3:f3:38:e9:c8:4c:9e:6b:c1:
be:70:61:3c:2f:3f:e4:e8:61:d9:48:3f:d8:99:60:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:B7:88:0F:01:2E:CA:CE:FE:9E:CA:A0:DA:4F:4C:AD:B5:73:F3
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:42:72:f1:fd:88:d8:d5:f7:33:d5:5c:c4:e4:bb:49:49:
e8:5c:c2:9c:4d:08:22:f9:ad:48:85:bd:54:ef:90:03:0c:8f:
de:e9:ef:39:84:2c:70:b3:98:53:39:b4:03:18:08:b9:80:75:
0e:81:8b:8a:2b:a7:fa:ff:50:0f:a8:74:cb:46:73:12:15:ef:
4b:78:71:7c:5a:58:7a:59:81:36:f3:2e:a4:d2:49:24:de:9b:
73:30:fb:a3:a4:b4:e6:fc:65:df:34:40:bb:c2:58:0e:8b:ac:
4c:da:4e:04:53:e8:e2:e9:a6:95:b8:fc:3e:de:da:99:0c:6c:
0e:1d:c9:9e:9c:c2:46:63:39:e6:14:14:13:e4:c6:de:13:1b:
ba:9c:21:a8:20:75:a0:97:ba:56:e7:a9:38:c6:2e:f6:8f:70:
a5:11:b4:53:d2:4b:a8:de:27:fb:0b:c7:b8:6f:46:77:a7:03:
8f:e8:c3:9f:17:99:61:3a:35:79:2a:0c:39:54:3f:04:4c:6c:
24:c3:b7:78:f5:19:5b:16:90:1d:0e:a1:e6:19:13:38:5c:85:
7f:5d:ce:05:0a:3e:ae:41:62:94:d7:fc:7e:0e:86:50:ee:c8:
90:e6:5b:49:c1:61:ba:01:7d:98:20:1b:45:86:13:46:7b:6b:
a9:98:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:24 2025 by rpki-client