Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: DNivEVfdFrd4YeGogBunuTjdrjtXgltbvJfAeVpyt4U=
Subject key identifier: EB:52:0A:AF:C5:CF:22:8E:44:F1:97:17:E4:E6:CF:D5:1E:47:FC:BB
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0198D54E71DB965C1C76F5D675D4F901EEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 019F
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: W9kKkZRlsZAMOe6ehDcGSkIRUJ/Ma7H1VDwIltnJ9Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:71:db:96:5c:1c:76:f5:d6:75:d4:f9:01:ee:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=eb520aafc5cf228e44f19717e4e6cfd51e47fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:78:60:19:9a:b5:2a:1d:50:c9:bb:21:a8:
d4:dd:70:7a:d2:58:6c:60:e6:a8:8d:f6:b1:80:46:
7c:6f:cc:e6:23:a3:27:8f:f3:96:c4:c8:d1:d9:a6:
3e:eb:46:92:ee:ba:7c:c9:37:00:1f:b8:ab:b2:69:
28:0b:e9:83:29:a4:3a:f9:85:fd:7e:25:92:2a:4c:
54:39:ba:18:c3:b2:6e:e3:a7:b5:02:53:b7:42:ab:
f9:71:7d:72:17:b8:82:4d:43:bf:24:ca:1f:c3:bc:
bb:06:da:7f:be:97:85:67:44:99:c1:f1:42:70:89:
d0:74:d3:b4:ac:34:77:61:10:83:d5:c4:42:7c:9a:
ee:e1:ed:36:2f:2d:91:0b:8a:87:6a:3e:b8:cf:cc:
da:85:5d:af:ca:53:e7:3c:4e:f7:f8:91:ac:64:47:
50:ea:6f:56:09:bf:93:42:8d:21:4b:79:bb:71:5e:
aa:25:63:31:35:b6:0e:85:6e:f3:80:60:8e:c5:d8:
cb:98:cd:ba:18:31:97:14:f0:c4:12:a9:9b:77:3d:
4a:7e:d5:88:f8:30:19:85:bc:23:39:0f:c4:5e:38:
4d:c3:d8:df:37:8f:f1:7d:a9:00:06:53:e6:57:2a:
e2:60:d5:2a:87:2b:52:67:48:99:c4:aa:34:a1:30:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:0A:AF:C5:CF:22:8E:44:F1:97:17:E4:E6:CF:D5:1E:47:FC:BB
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dc:91:20:ff:9d:16:98:42:d4:5b:66:6b:b7:81:cd:47:ff:
9e:f3:92:69:72:df:c6:97:18:e1:57:3e:c9:ab:02:31:e4:d0:
0d:d0:39:85:05:a9:78:b9:73:0b:74:85:57:18:c7:26:b5:d8:
a1:47:b5:46:d3:20:17:01:f1:bb:9e:84:ab:d6:7f:de:6a:12:
b5:84:2d:f6:76:27:04:68:c2:52:d2:f8:12:fc:7b:cd:4b:3c:
f7:02:4e:d2:c3:de:8e:4b:5c:fd:14:ff:43:49:f3:a6:36:b9:
dc:d3:bd:e2:7a:ee:b6:f0:b3:cb:c7:f6:f8:c2:da:65:2b:62:
e8:28:e0:30:49:f6:9e:55:66:06:89:0a:ae:4c:c2:2b:7c:f9:
3f:0a:27:91:24:90:49:48:df:77:8c:2f:ec:b7:72:be:bf:fe:
fc:7e:4b:cd:2e:19:67:6a:b9:68:63:cf:84:05:83:a0:19:e4:
6d:cd:26:7d:47:e7:0e:ba:b7:2f:d1:29:22:cc:b9:08:14:b2:
29:de:db:db:e6:b1:21:74:f8:52:bd:e7:c9:38:6a:e0:f5:72:
ea:e9:42:cc:b3:d6:27:a5:35:14:3c:10:62:88:aa:cf:0a:30:
69:80:bb:08:1b:d1:7b:3c:44:80:3e:23:28:8e:fc:e9:6f:83:
3f:cc:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:55 2025 by rpki-client