Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: AdJ/jIss0sNnONzxZ7ZsBukrjwbF0k25W3pHsJFpC0g=
Subject key identifier: 6B:41:EF:E2:50:3C:E4:11:33:A7:CE:B2:93:B7:AF:D8:95:75:7F:E2
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 01988544951ABB6896CBDDB67D54DB051BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 09D4
Signing time: Thu 07 Aug 2025 16:02:00 +0000
Manifest this update: Thu 07 Aug 2025 16:02:00 +0000
Manifest next update: Fri 08 Aug 2025 16:02:00 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: S87kMMkiqIaKu6GZVUULPTMtVEojCyGun4b2N1ba/lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:95:1a:bb:68:96:cb:dd:b6:7d:54:db:05:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Aug 7 16:02:00 2025 GMT
Not After : Aug 8 16:02:00 2025 GMT
Subject: CN=6b41efe2503ce41133a7ceb293b7afd895757fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:77:5f:f9:cf:ef:0c:7e:dc:64:97:6a:eb:
19:3a:1c:a3:fc:2c:9a:a3:1c:10:1c:58:1c:d2:93:
b7:33:c5:af:1f:67:4d:ed:49:c6:da:54:1a:8c:3d:
8b:41:9b:ac:61:18:f9:4f:b1:d6:e7:cd:dc:5b:4a:
17:f2:19:22:7f:28:77:de:9b:8d:7f:f2:c4:e8:83:
bb:5e:57:1c:df:a1:5b:8b:c6:f0:85:f0:69:a1:d9:
1e:64:7b:e7:b1:5e:ba:f2:76:6b:b2:d4:b6:86:03:
6c:ab:01:53:68:07:e0:7f:1f:1f:11:35:68:6f:e9:
ff:17:c1:b2:ed:e7:d4:d5:15:6f:47:6e:9f:2b:4d:
69:3a:bb:98:6f:d3:a0:62:b8:f0:5c:55:ba:4e:2c:
71:10:7f:91:c0:44:19:35:8e:ea:4f:69:85:1d:6e:
07:c2:61:e8:cf:ee:50:56:90:bf:aa:06:f2:dd:7b:
b0:1e:ef:0b:2b:56:33:31:80:4e:3e:f6:87:7d:3c:
79:29:3a:e4:9f:f4:1a:9e:28:94:2f:71:c1:21:a5:
92:6e:f6:0d:f0:c1:81:f6:1a:51:d9:db:6d:9a:6f:
c2:24:e2:dc:ef:c9:81:d8:47:e7:46:21:e2:d6:2f:
2a:98:50:24:81:71:a1:93:11:58:17:d1:fd:cc:08:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:EF:E2:50:3C:E4:11:33:A7:CE:B2:93:B7:AF:D8:95:75:7F:E2
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:42:50:c3:6d:b0:90:bd:1c:c2:77:73:dd:17:36:a3:b4:
e7:ce:f5:71:1e:4d:53:c9:48:0a:c8:df:7c:d4:ae:51:aa:d9:
0a:d7:61:b1:a6:e5:bb:77:f3:af:9c:78:08:20:6a:95:61:6b:
27:02:93:63:92:b6:02:9b:a5:b4:3c:d4:f1:0a:d3:34:5a:27:
5c:ba:50:47:ad:ff:fb:a2:93:b9:fd:5d:68:85:4c:76:e4:a1:
4c:83:55:f0:62:34:81:13:99:d3:25:47:bd:95:c1:85:a5:fe:
ad:75:2d:4f:5e:09:85:3d:6f:f6:14:55:00:c7:48:c8:1d:57:
1a:fe:04:a9:b8:d9:db:1b:7a:5d:e3:2f:5d:86:24:69:02:77:
4b:cf:f3:43:d9:b5:16:98:55:86:8d:dd:2d:e4:d1:33:07:be:
d4:4a:01:03:f1:04:39:68:4f:ed:98:e5:54:47:76:7b:66:5f:
9a:74:6a:f6:00:55:70:81:a2:92:13:2d:51:e9:44:e1:f4:a9:
d4:b2:c5:d2:e1:4f:86:7a:2f:16:13:70:3b:d3:91:54:d6:29:
ee:f3:99:dc:5b:92:63:03:47:c7:5d:32:f7:0b:f9:ee:4b:13:
8c:1a:6f:a5:fe:23:fa:df:a3:07:96:52:83:a9:66:d2:e1:c4:
13:cf:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:16 2025 by rpki-client