Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: 2jZtc/mKqoYwxVTxrHKOzFr+agJk0crRYk4RVmyZGWQ=
Subject key identifier: 4D:EA:7F:C0:3B:7E:9B:BF:7D:E1:9B:B0:85:C3:77:B3:8C:14:2B:0E
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019874194DB3D7F5AE28E1DC36F527AAD952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 06DE
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: fQN9ZFcEbFaiYHcCGGB8sLOtXShEP4fH70RlgobNu+4=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4d:b3:d7:f5:ae:28:e1:dc:36:f5:27:aa:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=4dea7fc03b7e9bbf7de19bb085c377b38c142b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:5e:55:26:3d:e5:e1:83:77:cf:62:13:b2:
57:b8:ad:be:f2:32:9b:72:c7:d9:0e:d7:51:b1:78:
48:45:c9:ec:2b:60:e5:09:e8:ce:34:a6:b5:77:17:
87:2e:a0:3a:cd:b5:17:21:4e:da:ed:49:ae:23:43:
a6:e7:c7:fb:27:b5:8e:25:aa:c0:70:a9:12:c0:33:
72:58:4c:56:8d:d1:ed:e5:2d:43:9b:eb:88:b6:2e:
6c:a0:0c:8c:ee:bb:be:ec:b3:6d:9e:f0:c7:73:de:
78:67:87:27:a0:cf:ba:56:ae:84:cd:a6:56:d3:5c:
ea:17:dd:02:fa:63:33:7d:eb:20:ce:29:cc:bf:9c:
a0:13:fa:a1:7b:3e:04:eb:d0:49:48:c9:71:3d:25:
fc:cd:62:91:5b:9d:70:f1:1e:69:7d:cd:30:a5:aa:
d1:68:60:a3:67:54:13:38:f5:9c:08:27:08:bf:ad:
98:17:f2:69:ea:3f:67:eb:39:84:1e:13:b8:0a:7b:
ed:c6:d3:92:db:92:39:fe:79:7e:1f:0d:88:41:4b:
09:a1:19:8f:46:3b:d0:49:97:d4:ef:02:b2:5f:aa:
99:48:c1:07:0f:b7:84:3f:f3:b8:f4:84:0d:c2:50:
20:1b:2b:25:57:8a:56:61:d0:15:26:1b:6c:b6:6d:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:7F:C0:3B:7E:9B:BF:7D:E1:9B:B0:85:C3:77:B3:8C:14:2B:0E
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f2:a5:f7:ee:0d:eb:d1:39:da:74:0a:8f:2c:31:72:e3:3e:
59:b5:9b:d2:d2:fd:c4:05:91:59:d6:00:ff:c9:29:50:0a:14:
f1:48:31:ee:41:57:44:01:20:e9:6e:4d:06:98:bb:e3:6c:ee:
bf:0f:cf:75:0a:8a:82:3a:ba:9f:87:6b:64:cd:1e:80:b0:c5:
35:3a:f0:f3:0f:59:78:a6:bb:f9:14:05:e6:df:a0:30:c5:59:
f7:69:03:6f:1e:39:76:9e:12:24:a0:2b:0d:72:57:08:9b:5a:
f2:40:73:80:32:95:c3:7b:36:b8:5e:44:f6:fa:d0:ca:33:8f:
9e:a3:ba:95:a5:9a:fa:79:c1:93:23:1e:90:0e:19:7f:5c:11:
25:be:da:0d:42:05:2b:73:0d:b4:a8:02:d0:0c:a9:a8:41:3e:
8b:06:31:b3:a0:98:46:1e:fe:ec:b0:4d:cf:b0:50:11:0e:90:
78:41:b7:eb:51:eb:3c:12:16:f6:b7:8f:fe:50:09:9f:5a:18:
83:35:be:2f:3f:34:6c:e1:0a:22:a0:4f:75:eb:43:99:cc:c3:
03:15:4a:48:00:8c:72:bf:ec:c5:9d:d9:84:9b:b0:4b:bb:fa:
b3:f4:36:ca:74:8e:cb:43:61:8f:7b:90:7c:bf:67:95:e2:8d:
03:c4:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:53 2025 by rpki-client