Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: dqvppqFJtiQTkp6LRgnBS8UGHKahbYlQE4Uvy9IxnzI=
Subject key identifier: 79:A9:0C:EB:38:89:7E:D4:0E:92:56:55:2A:6C:60:AC:F9:C6:1F:A7
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0198D5BBDE1435FBB1AFF4BB2EE63D834995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1039
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: xg5+Bp4Eqf4Y+h4mbepzkhEavKH9w2hDNF1+E/2OOUw=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:de:14:35:fb:b1:af:f4:bb:2e:e6:3d:83:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=79a90ceb38897ed40e9256552a6c60acf9c61fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:43:e8:0a:1f:9b:3c:1b:7e:75:f0:e0:a4:
e2:4d:86:ec:37:8d:a1:97:2b:a7:a9:fb:8f:58:7c:
19:23:62:f5:a6:ee:f3:17:9f:96:b6:8a:28:1f:2a:
7c:52:18:7a:82:81:db:f9:5e:ac:48:9f:1f:2e:1f:
b4:df:37:d8:98:38:48:2b:b7:08:d7:3c:c2:bb:46:
f6:70:88:84:97:44:e9:2a:e9:ef:be:d5:e2:4d:2d:
70:57:0d:33:5b:fd:46:5d:71:f7:ee:23:eb:f0:fb:
60:40:a3:4f:f3:1f:50:a8:54:d6:19:d3:36:a0:a9:
3b:79:28:30:e0:81:1d:a1:0b:2b:a2:99:51:11:36:
64:55:94:f7:fd:e4:dd:3c:ad:ac:52:c8:59:22:eb:
ba:96:4a:a6:70:c5:bd:5b:f3:32:8b:97:79:af:e1:
9e:09:ce:fc:a9:78:8d:ed:34:5a:77:18:f9:e0:a7:
63:88:03:bc:0a:16:21:51:86:6f:59:35:38:1a:f1:
b6:70:70:97:c9:bc:dc:fe:7b:bc:0f:ce:29:36:3c:
fc:71:56:67:45:7a:7c:80:3f:e8:8c:93:25:17:ec:
01:e3:96:54:d3:b7:59:43:e2:1b:0d:7e:f9:98:69:
04:cf:88:58:4e:0c:a7:6c:a3:b3:66:2f:54:ef:ca:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A9:0C:EB:38:89:7E:D4:0E:92:56:55:2A:6C:60:AC:F9:C6:1F:A7
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:61:be:34:c5:59:37:fb:7e:3f:a3:1f:c0:5d:60:90:25:
21:65:b1:06:14:e8:d0:07:dd:6d:8f:ed:12:14:d5:aa:55:57:
37:05:e1:73:3f:56:de:5f:db:bb:d9:cb:ad:66:03:88:10:66:
58:16:d1:36:d1:a9:43:70:3f:96:4e:44:8f:5c:54:ab:3e:7b:
c8:77:d5:30:4f:5c:9f:13:d9:eb:eb:54:3d:cc:d5:11:51:6c:
40:a2:00:9a:84:35:cc:40:7e:1b:5f:8d:f0:31:45:2b:59:a7:
0b:ff:ba:95:75:e2:89:26:99:60:24:0e:6f:ac:44:20:5f:0e:
26:ad:4b:06:8f:bf:a4:a3:6f:6d:23:d0:c5:37:72:fc:33:1f:
5d:7b:1c:71:6b:53:db:36:4d:67:1e:fb:be:38:5a:8d:16:cf:
10:a8:4c:4c:98:24:5b:90:4f:d5:83:40:b9:e2:67:7a:d3:e5:
bd:21:d7:01:7f:fc:56:b8:81:2c:bf:af:cc:34:2d:3a:30:61:
bc:36:a7:0a:80:46:8f:df:29:3e:b7:b1:32:a8:c9:79:da:6a:
c4:3b:bd:6b:13:c9:8e:bc:0a:d2:0c:4c:16:2a:d2:0e:f8:af:
1d:9d:fb:c4:4a:3b:fd:e1:49:b4:48:76:24:ee:0c:b3:ba:ba:
eb:9a:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:11 2025 by rpki-client