Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: cIOQxGOBb4fR8c7ZchKvK4XN+mH3ffX9BqvxZtjzLvc=
Subject key identifier: 8E:73:C7:F0:4E:09:13:9A:16:11:78:F1:43:F4:66:26:92:E4:30:1D
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0198D5835B7F8913C52021A377738A93A475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0A97
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 0aYEkomoS3poA2jllw/5dbduXiuEC1lpBs+RET/mais=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5b:7f:89:13:c5:20:21:a3:77:73:8a:93:a4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=8e73c7f04e09139a161178f143f4662692e4301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:44:38:14:16:6e:f0:2d:7a:e8:12:93:0c:
0b:e5:47:98:0b:e6:33:4e:af:2b:eb:ac:97:99:0e:
9e:4b:bc:f2:39:6c:82:ac:99:1b:d1:f1:e5:8b:0d:
e4:8a:c1:29:21:f5:65:a7:ed:ac:1c:05:9f:f7:31:
5e:69:db:4e:58:ae:96:e3:8a:76:79:ad:86:20:de:
85:cc:39:b4:d3:3b:de:d9:88:82:fa:57:b7:ba:46:
f2:9c:da:93:bc:c3:04:11:54:4e:98:30:be:77:5f:
bf:47:53:57:17:f0:ae:9a:67:b6:a2:c9:7c:91:3a:
34:01:1d:b2:dc:52:4d:d5:68:e7:a3:a9:28:bb:e2:
55:07:57:42:71:1d:b6:61:94:11:4a:b3:29:0a:1e:
08:00:97:81:20:13:34:c6:16:1d:e6:c1:06:16:e6:
14:e7:72:6d:3e:71:a3:2b:9b:50:99:ce:75:d9:2a:
d6:73:54:6f:9a:61:17:52:cf:5c:69:40:5d:80:fb:
a1:97:0f:86:08:d4:c0:7d:47:8e:16:2f:ea:63:e1:
e8:02:b2:56:5e:0a:83:ac:04:7d:20:b7:8b:1c:9a:
ef:a5:f8:2e:08:3a:a9:46:ea:e7:68:dc:92:e4:3f:
67:67:1f:9c:b7:20:be:4d:ad:de:be:93:6e:d8:0b:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:C7:F0:4E:09:13:9A:16:11:78:F1:43:F4:66:26:92:E4:30:1D
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:e5:26:69:51:cf:3b:e4:b3:55:e8:91:a1:a5:be:2a:6c:
f4:7d:88:f1:35:90:06:44:97:d2:df:bd:a1:bc:a4:e4:07:3f:
bf:a8:fa:06:d9:c3:62:7f:37:2d:09:4b:d7:ca:12:c4:6f:d2:
11:1d:ac:8e:dd:60:0b:21:20:24:83:ea:15:5c:65:ff:c3:c2:
5a:50:21:fa:48:a4:9f:90:20:b6:a3:34:8d:c2:2a:bd:8c:f4:
81:97:38:fe:89:47:ac:61:e3:51:2d:08:9b:0d:05:0b:49:56:
8f:16:1c:93:42:bd:6a:3a:63:d4:e7:bb:d3:05:ec:2d:29:2c:
09:c2:1e:1e:8f:c7:c3:b9:20:b8:07:62:8d:a1:e0:55:3a:9a:
0f:9e:a2:96:2a:80:cc:c0:b0:4c:a1:73:fc:08:8b:ab:18:d6:
45:c9:61:ef:62:02:e3:d2:00:3c:95:9a:46:2a:7a:ef:f1:88:
b2:fb:05:91:08:0b:11:35:0a:3c:8b:06:5a:b1:d8:a9:46:32:
d3:c3:0d:75:40:12:32:ae:c0:be:37:34:7f:95:20:9d:2e:16:
b3:8f:9c:5e:85:c5:22:38:44:61:48:f3:87:50:d0:6f:d0:ec:
37:c9:c1:23:ec:b8:a0:dc:0c:90:e3:95:48:20:ec:40:67:64:
34:1c:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:36 2025 by rpki-client