Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: RQGxbtyC5GQ4ZQJvGo3ZAvp0zqmyHF+9YAHjijwzNJ8=
Subject key identifier: E1:E8:67:AA:A4:BE:8D:1A:F5:0A:36:52:1F:E1:18:BC:E5:FD:DE:68
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01988166E32178D478787C64AF7E0C07777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0CB6
Signing time: Wed 06 Aug 2025 22:01:00 +0000
Manifest this update: Wed 06 Aug 2025 22:01:00 +0000
Manifest next update: Thu 07 Aug 2025 22:01:00 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: 5T7bEdXWo9GWjvH+29S5HV+i0gxZCjf5lvuu2FEyPdU=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:e3:21:78:d4:78:78:7c:64:af:7e:0c:07:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Aug 6 22:01:00 2025 GMT
Not After : Aug 7 22:01:00 2025 GMT
Subject: CN=e1e867aaa4be8d1af50a36521fe118bce5fdde68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:b1:ba:6b:30:c7:1f:42:d1:dc:ce:31:38:
b4:dd:ca:9f:31:e1:c2:c6:d1:b5:30:c6:53:17:68:
a6:1c:d4:65:b8:ed:77:ca:fd:e9:9b:1a:b9:04:63:
89:5d:bb:65:7c:6d:35:3f:e3:56:32:7d:8a:5f:29:
9f:b3:44:8c:38:d0:4e:96:08:e7:d4:e3:cd:3e:e0:
34:d9:20:30:97:d8:86:4a:4a:be:16:4e:fb:f1:f3:
8e:95:4e:99:45:f8:97:3c:b3:de:b4:4d:31:e2:ba:
9a:c0:a3:6f:52:ee:94:f7:dd:97:71:41:3b:4f:18:
77:b4:66:cf:10:b1:08:1c:a3:e8:71:01:b8:57:bd:
8a:62:c8:66:21:a8:6f:11:9f:87:d1:85:42:bb:f3:
be:8e:57:3a:36:be:b9:b2:14:e8:de:0c:9e:6d:c2:
9d:31:ea:d2:d7:9b:32:b2:38:b1:03:d2:33:9a:8c:
81:61:53:55:f7:95:c6:3f:a9:b3:41:a0:03:3d:78:
da:77:d0:51:21:ce:2a:7a:ca:87:6f:13:10:b1:cc:
50:ea:27:49:01:be:74:3d:25:17:1b:30:e5:2f:f1:
88:b5:66:ae:8e:1a:13:37:f2:40:bb:8b:90:6d:5a:
4a:67:d7:8d:dd:fe:a8:c4:d7:13:9b:2f:c7:0b:a6:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:67:AA:A4:BE:8D:1A:F5:0A:36:52:1F:E1:18:BC:E5:FD:DE:68
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:e2:59:6f:12:89:cc:3f:42:c1:e8:83:b9:d6:e6:35:31:
82:c0:02:79:22:7b:66:34:e2:0e:b7:fb:a5:1a:eb:df:16:96:
d1:42:52:7a:dc:2b:17:28:a7:a6:84:c0:a1:56:92:ac:75:60:
83:ff:09:c7:2d:36:17:e0:76:31:82:60:e6:e2:7e:27:cc:6c:
20:84:6d:29:59:82:74:dd:77:ea:4f:c4:c6:2b:5c:f0:0a:8b:
58:26:f5:4a:b4:6a:42:34:34:2f:53:20:8e:11:1a:93:92:0f:
ce:c5:3f:3b:61:76:ea:c1:22:a5:0e:c6:f6:d5:b6:8f:01:9d:
98:a4:c8:e0:99:63:d3:34:41:b3:35:82:d8:39:0c:fc:02:15:
1b:41:bb:1f:f6:6d:33:de:3a:29:56:3f:ef:9f:2c:63:e8:9b:
9b:8f:91:54:2f:d3:08:97:cc:2d:25:25:c7:c1:2b:dc:32:ca:
05:51:06:85:d6:11:4f:fd:47:03:29:21:57:57:0d:fe:d9:6a:
11:ce:f7:da:05:d7:ce:47:44:aa:c2:71:53:3a:96:ae:7c:67:
4e:03:d0:93:52:01:65:65:e9:df:16:0a:05:0f:99:b3:38:7d:
65:d3:89:50:e2:6f:35:6d:28:8c:2a:64:38:c6:a5:aa:69:ce:
46:89:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:19 2025 by rpki-client