Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier: 58SOcqELdbpWv2BjZZ3fy4f0Ijuckh5CDeUrpgG1i9E=
Subject key identifier: C8:DB:BC:40:F7:37:93:EE:46:A4:04:D0:20:4B:A5:83:02:15:85:82
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 01989335C6F890095293631650C16EAB4FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number: 1021
Signing time: Sun 10 Aug 2025 09:00:31 +0000
Manifest this update: Sun 10 Aug 2025 09:00:31 +0000
Manifest next update: Mon 11 Aug 2025 09:00:31 +0000
Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: 7/O9LnLaysE4O/uQH4ai06X2GoEOywhqxa0vCIjyMmc=)
2: RPI004Nflusi7FfUJpmrxTwPQuQ.roa (hash: +Ae0xcW4fJMWdAq7n5EIK34ZCifbX83L0SoWJBas4kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c6:f8:90:09:52:93:63:16:50:c1:6e:ab:4f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Aug 10 09:00:31 2025 GMT
Not After : Aug 11 09:00:31 2025 GMT
Subject: CN=c8dbbc40f73793ee46a404d0204ba58302158582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:c4:ff:42:f7:c1:c5:51:49:88:51:5a:57:
aa:11:8c:3d:0a:33:ef:1a:4b:61:cc:55:8f:9d:8f:
29:5f:fa:4e:52:56:87:89:7a:77:9c:b2:4c:52:50:
f0:ad:7e:a5:11:a2:b5:3d:37:72:cb:6c:4c:75:f5:
ae:14:b7:94:02:a8:23:c4:a1:18:bd:d3:97:de:c6:
da:5b:5c:ad:eb:5e:47:6c:76:ee:1b:af:67:0e:be:
b9:f7:5e:aa:bd:cf:2f:a4:18:41:68:7b:5d:15:f4:
99:aa:52:5e:92:b9:e9:67:ee:58:73:f4:da:c5:30:
f0:d0:c4:a6:7b:2f:d7:73:12:37:ea:b4:ba:d1:26:
d4:c8:0e:67:e1:b8:05:3a:1b:45:0b:cd:73:63:e5:
2d:15:2f:af:21:33:40:ae:fc:1c:50:9b:79:67:37:
e9:7c:ed:7a:58:1b:3f:07:39:b4:4f:90:11:b5:e6:
6e:7b:9c:88:25:79:65:30:a1:1e:d1:52:eb:31:09:
d8:da:e3:f0:ce:d5:e2:b3:69:3a:a5:ec:ff:ba:c5:
ce:6a:86:2d:41:c6:55:63:4e:f1:a4:c3:3b:3d:be:
69:ed:2e:e1:f7:0f:fa:d0:96:9c:e4:13:29:95:32:
4f:16:99:61:ee:d2:02:3e:af:be:76:cc:0c:1b:cf:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:BC:40:F7:37:93:EE:46:A4:04:D0:20:4B:A5:83:02:15:85:82
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:3f:15:61:b1:5c:75:14:e8:0c:b8:d5:8c:0a:de:a5:2c:
c2:98:3f:ab:e0:03:13:40:2f:44:3d:66:f8:62:62:17:26:86:
56:08:cb:93:dd:e8:d3:b3:5d:30:7b:cd:46:b5:f8:89:0b:d1:
44:d1:25:bd:90:44:99:03:d5:e1:f9:3b:f6:6c:aa:9f:2e:39:
7e:3f:d4:46:25:9e:46:ef:ce:1d:9f:b0:53:25:18:cb:70:d2:
06:cb:9e:c9:ae:cb:5e:4e:45:ea:2d:48:06:6d:4d:e4:22:9e:
45:12:59:b1:15:16:98:b3:45:ab:b9:a0:99:a4:de:2a:af:21:
75:bb:d0:fe:ae:8c:5a:30:fd:01:d9:49:e9:0a:a8:79:1b:1b:
ed:03:73:1e:84:69:a8:41:9b:68:35:e9:c0:3d:bd:06:41:88:
71:81:22:b0:df:93:ff:7b:50:ac:93:44:53:32:a4:39:71:3d:
5a:b1:a3:8d:e8:48:1e:89:6a:fe:cd:e0:df:da:6e:cd:8c:52:
43:74:55:8a:0f:87:97:e1:63:5f:8b:eb:36:d1:af:7e:7b:4e:
85:c0:c5:11:ed:2b:6d:93:7f:4b:03:cf:b7:c6:70:02:e3:e3:
a5:83:ed:c9:29:51:e7:8c:89:82:d0:6d:30:c5:17:a9:5e:d5:
44:45:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:46 2025 by rpki-client