Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: 8YDv11JomdxbfviC4Z+Hvlp4gRbnibxoiKdl5H0WlPQ=
Subject key identifier: 16:1A:12:76:35:5E:41:11:CC:43:25:29:86:99:4B:AB:81:FB:76:4C
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0198D515DA6A62D495BFAA84ACF9C2DE9300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 10E0
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: Kp0INoFMecKPKv/2IIGAl6+2gLTJw5Oe/BhseA8hK1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:da:6a:62:d4:95:bf:aa:84:ac:f9:c2:de:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=161a1276355e4111cc43252986994bab81fb764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:40:11:05:bd:b0:ca:76:3a:ef:ab:e3:47:
f2:2c:18:bb:32:d5:94:88:33:ee:fd:14:1b:66:ca:
14:ab:67:a1:d6:97:29:f1:02:cd:ed:28:e0:5e:35:
e9:60:8f:c7:7c:59:c0:a7:3a:0b:3a:4d:44:b4:da:
af:32:6a:47:70:a2:76:fb:95:eb:bd:0f:b7:f5:5d:
fc:79:7b:69:92:41:36:df:48:d9:61:3f:9a:ae:e2:
61:f5:f5:86:92:76:26:18:84:ce:1f:df:4c:79:9b:
af:b8:d8:f6:9c:8d:c8:b9:75:bd:dc:65:29:41:36:
9f:aa:0e:64:f8:64:83:81:18:53:4f:cd:eb:ed:47:
bb:ba:ae:ca:e0:56:b8:65:81:6f:05:a1:a5:31:c0:
29:91:6b:7a:7b:7b:a4:be:77:45:b0:70:9e:3f:be:
1a:63:97:33:52:39:8a:ed:11:ef:eb:e2:d3:4a:e3:
8d:7d:63:4b:76:1f:f9:04:7f:61:38:f8:3d:aa:72:
27:fc:2f:70:5e:83:a7:b7:31:47:7d:49:e2:ba:2f:
63:82:08:a3:13:9b:77:f2:8a:56:60:e0:5b:5a:82:
70:a4:2f:a8:aa:4b:e4:6e:33:a4:60:57:96:e4:b7:
f2:57:22:63:2e:5f:59:1d:69:7c:4e:85:e9:bf:4a:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:12:76:35:5E:41:11:CC:43:25:29:86:99:4B:AB:81:FB:76:4C
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8e:bd:a1:3e:1a:72:1c:e8:5f:6b:cf:ac:07:4f:d7:b0:4d:
29:6e:97:37:d4:d3:7e:a5:2f:3f:b0:db:dd:2a:31:bd:aa:c5:
ee:a2:76:b5:a7:b6:8b:ab:ed:21:b8:11:54:0b:53:2a:63:70:
e8:3a:5e:51:6a:78:dd:b1:a8:c1:e3:c5:bb:b5:bb:d4:7c:72:
dd:cd:f3:18:6b:24:e4:c7:81:46:f1:7c:f9:5c:b9:d1:c0:85:
cf:43:0c:b1:12:ba:11:96:19:2f:d0:9d:ba:91:b0:57:47:fa:
eb:75:05:26:5c:b9:69:7c:cf:07:00:9e:9c:e6:54:cf:fb:72:
78:74:24:fd:6e:09:fd:30:c2:41:0a:b7:4b:89:95:40:31:90:
8b:43:98:95:f1:eb:c2:74:5c:8c:20:2a:14:78:36:ae:60:1c:
74:3a:89:31:b7:15:82:ab:27:07:15:42:35:6a:7c:1a:50:dd:
f6:22:3d:72:e8:86:14:7f:8e:91:b2:49:a1:8d:8e:31:ab:4f:
12:f7:9b:60:d2:37:d2:69:5a:75:9d:8f:1c:0b:91:20:53:c4:
ba:57:89:88:59:19:25:cb:28:5a:a1:0e:0d:11:36:be:81:6f:
88:c2:62:22:5f:ad:30:8c:32:dd:ed:b8:bd:fc:1c:f6:40:e0:
5d:fa:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:55 2025 by rpki-client