Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: yGbiWtVOA3/dWKO9GnXWWr0pPina6tGTnmjGdckRK/k=
Subject key identifier: A6:B9:B5:C8:B9:A5:9F:7F:50:30:F6:08:55:E4:06:67:DB:15:EB:BB
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 0198D51565D8337ECE6CAF54A85C50C92B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: 2dLGYUqccuqkzy+g8Ha0FZXpeyV8uoNaL1tkLlkLpQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:d8:33:7e:ce:6c:af:54:a8:5c:50:c9:2b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=a6b9b5c8b9a59f7f5030f60855e40667db15ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:da:14:ac:8f:b6:aa:40:62:8b:00:37:84:
14:01:4a:d7:79:1e:00:17:e2:1d:b0:29:19:f8:f9:
18:f8:85:0e:df:c3:4d:41:88:8e:45:f1:1b:b0:a4:
10:14:30:9c:f1:4f:d2:fc:39:e4:33:7e:6e:cc:0b:
76:e5:f3:a5:a9:28:7c:93:eb:c3:40:23:f0:fd:5b:
fa:a9:1b:88:14:70:a5:c1:2f:ee:ac:6f:2f:9f:db:
17:8e:97:d1:f9:7f:8c:79:49:28:f9:c7:b4:9e:d1:
d9:89:f1:52:09:17:a4:7a:25:ab:02:8a:3f:80:59:
80:b3:a2:2a:79:5b:63:f1:34:5c:a0:15:92:df:21:
38:ff:2d:40:76:23:4a:89:2a:73:ea:ce:ba:25:a6:
65:23:0e:61:d8:06:86:fa:9e:e4:0c:3d:64:f5:bd:
26:60:8f:93:a4:80:99:52:a9:28:f5:33:84:31:72:
95:24:87:5c:5e:00:57:f6:8d:b3:79:4b:aa:93:5c:
39:df:c6:a1:2d:b9:2e:f4:18:51:9e:58:ba:3b:f0:
35:ce:2c:fb:9b:b0:31:bf:36:dc:fe:01:e2:77:7a:
67:c5:28:33:50:78:ce:5f:bd:fc:1f:31:21:95:05:
2d:4e:36:f7:78:18:1e:c5:15:12:6e:dc:5f:2f:aa:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:B5:C8:B9:A5:9F:7F:50:30:F6:08:55:E4:06:67:DB:15:EB:BB
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:78:d2:c8:a0:b4:52:9e:f0:6a:42:0f:99:c8:75:8e:da:
a5:67:21:ea:59:fb:0d:6a:7a:7e:7c:17:ff:37:ff:4c:45:17:
41:e0:56:33:55:b8:1e:07:c0:88:79:ab:a8:f8:0c:30:93:28:
69:2b:70:c5:58:5d:46:8f:30:79:0f:63:a7:51:3c:e3:fb:4f:
22:4b:58:b8:38:67:bf:5b:2f:b4:8e:1d:70:92:5a:f2:17:d6:
87:6e:02:7d:08:73:ff:bd:5b:86:31:47:44:e4:94:69:2f:8b:
af:8b:b9:56:9c:87:8b:ae:f3:d6:38:54:a6:43:d4:f6:21:0c:
7b:0a:c7:8c:51:83:81:04:0d:32:2f:54:8e:f3:9d:f1:b3:48:
89:9b:69:97:7b:1a:a3:76:6a:34:2a:63:be:dd:bf:9f:7e:6e:
16:45:b9:bf:66:2d:e1:a4:0a:57:4a:94:cf:56:31:33:4c:74:
0f:72:e3:ec:7a:38:81:56:c2:96:10:23:37:52:3c:d6:5c:43:
8c:f6:5f:a5:e0:36:a6:a4:d1:d0:6f:c5:be:d1:32:2b:91:d4:
79:f1:af:8b:18:38:99:b8:a1:7d:b7:b8:f1:5c:3d:0b:f5:bd:
d9:24:6b:fd:c9:e2:fb:2f:63:cc:ba:d9:63:fd:3d:a6:5b:9c:
dd:7c:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:41 2025 by rpki-client