Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File: D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier: AGbpCb4GDLTqwjsc818Q6YP/MzLJr7QK5+dEAy8XBSw=
Subject key identifier: 15:FC:ED:88:EB:9D:53:C2:68:09:B4:AD:8E:07:3E:5F:4F:BB:2C:32
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 0198D66047924F2B406E536EBEDBE874DCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number: 0913
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: sLA6gqXXH6fISCGaeALxpYkAM4Fzn928rg539pVk6YE=)
2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:47:92:4f:2b:40:6e:53:6e:be:db:e8:74:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=15fced88eb9d53c26809b4ad8e073e5f4fbb2c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:3c:f6:fb:99:52:8f:e2:ad:7e:c1:e6:b4:
16:df:14:e2:05:08:a5:60:47:93:63:26:ba:f3:34:
10:5f:4a:78:06:bd:8a:6b:7f:1a:2a:98:e3:56:ee:
84:70:78:4e:44:7f:ec:4a:b2:53:b8:41:a5:03:a3:
98:07:15:fa:1d:0e:fc:f9:76:f5:30:0e:6b:6a:08:
84:54:3c:a5:aa:fe:1e:c2:bf:c2:7a:25:45:73:5b:
07:d7:25:54:05:dd:0a:57:5e:92:b7:d4:bc:97:1d:
f7:bd:29:3b:a2:30:c4:49:eb:d6:32:ee:53:d2:06:
a4:f0:f3:c7:88:20:91:53:c9:74:fb:02:49:97:32:
c2:1e:27:67:8b:f4:5e:f6:6f:c8:f8:13:a7:3b:93:
5e:9b:0b:82:c4:ad:c3:0e:7e:26:9a:30:2c:a4:06:
aa:d4:90:1f:49:19:77:dc:34:fe:b6:92:17:6a:22:
16:86:43:de:45:97:14:38:33:37:b8:cf:98:87:ca:
4d:67:df:8b:a2:67:d8:6e:6d:e6:1f:8d:2e:35:8e:
11:b4:ca:76:d0:0c:93:e2:5f:29:a1:ba:a1:d9:a2:
01:cb:e1:b2:e3:0e:69:eb:26:1b:77:e0:cd:c0:cc:
c1:9f:0d:9b:3b:d4:24:6a:8f:9c:89:5c:64:98:79:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:ED:88:EB:9D:53:C2:68:09:B4:AD:8E:07:3E:5F:4F:BB:2C:32
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:92:2a:24:de:6d:20:85:ec:9a:a4:e6:8b:72:51:7e:78:
d4:22:c9:fa:99:0c:e4:97:04:00:16:81:48:c8:22:99:d2:60:
09:84:4a:78:54:4a:9b:ef:3b:af:2f:d1:99:ea:e1:dc:b0:dc:
98:2e:52:e8:dc:52:f0:b3:61:39:4d:0d:10:35:2c:ad:ed:92:
60:a0:ce:81:95:42:02:93:de:16:6d:68:1a:40:b2:26:65:6b:
52:f0:9d:f6:d7:13:81:ac:fe:1f:09:03:f2:72:bf:38:52:95:
f1:ee:7d:97:e8:71:25:52:f5:28:34:a3:0b:31:f4:3c:47:ad:
82:b2:c2:13:f6:a3:7f:8b:c8:9e:14:fb:b4:8a:ae:8c:05:29:
7a:9b:69:08:ba:6d:d9:4d:7c:8f:49:d1:56:b4:ee:b6:7b:82:
e9:bc:2a:01:f1:bc:e9:34:92:ab:51:2c:f7:54:f1:52:23:cd:
18:d5:a5:c3:85:64:7b:f8:1a:6c:5e:d7:41:5e:e1:61:70:6a:
0a:78:e5:63:87:ac:8f:74:f5:34:f3:48:cd:79:a0:49:9a:3b:
ef:fe:b1:f1:71:2b:85:25:5a:c1:76:48:27:b2:8c:1c:70:b6:
02:68:e8:c1:97:f4:2b:ad:c5:ad:e6:42:aa:5d:a3:ba:95:2d:
5e:12:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:27 2025 by rpki-client