Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: fiYf96/JX74n3PdXWcq5hwBkRiBEMyMDcb++gxYt/WE=
Subject key identifier: 8A:B9:E9:19:DE:34:7E:08:83:7B:9F:5D:15:59:4B:43:75:0E:72:3B
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0197B7B38A9215CD6AC0E48A29EDC4978DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0A03
Signing time: Sat 28 Jun 2025 18:01:26 +0000
Manifest this update: Sat 28 Jun 2025 18:01:26 +0000
Manifest next update: Sun 29 Jun 2025 18:01:26 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: A9DvrK7/43Rukq+J2eON12mvVifRgLpA8XiuWgDIbEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:8a:92:15:cd:6a:c0:e4:8a:29:ed:c4:97:8d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Jun 28 18:01:26 2025 GMT
Not After : Jun 29 18:01:26 2025 GMT
Subject: CN=8ab9e919de347e08837b9f5d15594b43750e723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:d6:9e:51:0d:af:51:a0:46:c3:ec:a4:01:
9f:f5:45:36:6a:9c:d6:71:a3:19:9f:90:81:c7:e7:
ce:a0:69:96:2c:32:f8:ef:38:b9:ca:7a:5b:6d:a9:
f5:b4:dd:fd:ec:b6:56:99:15:e6:3e:d8:6c:5b:4f:
58:6f:52:d0:c3:9a:f4:45:a7:d8:0b:cc:8a:c3:d3:
4b:59:f1:c2:d5:49:87:cd:b9:56:e7:06:76:09:a7:
da:03:fb:90:d0:dc:cf:1e:78:10:d4:4e:79:f0:54:
da:16:e4:ce:84:d3:b1:14:cc:27:4e:4e:07:db:b8:
0b:92:3f:fd:5c:33:ff:a6:67:64:59:09:d2:77:15:
b1:9e:3a:ca:8f:cd:ba:96:ee:1d:f3:24:9a:87:2f:
70:24:34:c0:24:2c:91:5b:0a:56:bb:84:36:26:a3:
c4:19:57:40:58:f5:67:a5:8b:2b:ea:cb:33:4a:e8:
31:69:87:be:b7:2d:a1:de:2e:64:ea:d3:45:ac:89:
e5:ce:d2:0a:c5:6e:03:10:85:77:9c:27:3c:bd:71:
a7:89:9a:67:08:69:8e:46:50:05:41:a1:ca:41:0e:
5c:c7:32:d7:0e:7c:50:28:53:e0:9f:91:4e:fc:0b:
e9:39:6d:c9:25:c4:ec:53:85:d6:7d:01:69:54:1f:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:E9:19:DE:34:7E:08:83:7B:9F:5D:15:59:4B:43:75:0E:72:3B
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:89:47:f7:ee:46:81:90:57:9d:b8:b7:4a:f1:f2:49:7e:8c:
5d:84:66:28:49:3e:9b:63:a6:6b:63:e8:eb:e1:fc:e8:cd:23:
d4:05:29:93:4b:b8:ff:a2:fa:56:c7:ae:e6:27:15:7d:ce:5c:
af:82:aa:a7:85:0b:1d:be:4d:b0:48:e6:16:c3:87:35:dd:25:
e5:0b:cf:62:18:21:90:22:6d:23:22:13:82:e0:f2:7e:0d:19:
05:4f:8f:18:d3:6e:82:65:6d:2f:43:9b:2e:37:44:19:4d:5a:
59:ff:f7:92:09:1d:b3:a8:34:3f:bb:70:91:34:14:b2:92:11:
00:0b:55:c8:04:2a:03:9c:93:41:f4:6f:f8:c2:d0:13:62:2b:
c3:2d:9c:11:e9:ad:74:bf:69:b5:88:bc:46:9d:d4:75:8c:2c:
fb:7d:9c:87:42:93:cc:c8:5b:57:35:03:a8:cb:61:a1:38:21:
68:a4:29:d4:4d:42:8b:31:83:d2:d0:09:54:7c:46:e2:30:f9:
e3:37:10:0e:7a:fa:65:35:38:d8:77:1e:ff:9a:94:db:c2:50:
4e:ae:5c:d7:e3:8e:5f:9e:a4:39:e0:84:76:af:d4:a4:9c:2c:
e5:af:9a:c0:55:72:b7:4d:fe:9d:7b:30:fa:e3:30:48:2e:5c:
fb:96:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:33 2025 by rpki-client