Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: WGfmHVR5+t0UEtSBRHKlhU20mILARGfv9n6Ma+/bxyc=
Subject key identifier: 8A:2B:7D:2B:6E:A9:9B:9C:3C:18:3C:AF:E3:76:B1:9A:5A:A7:EA:E7
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 0198D65F31666264D4EF535F7252B5DD7B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0C4A
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: mlwCQVfBJ7YLr5054lPMQhdmfQugNMLR7FDHwhl2b74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:31:66:62:64:d4:ef:53:5f:72:52:b5:dd:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=8a2b7d2b6ea99b9c3c183cafe376b19a5aa7eae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:cd:59:90:53:bd:c9:04:47:53:b0:cf:f7:
9d:40:e7:3a:6a:12:43:6f:ee:80:ec:43:26:e3:4c:
e5:11:25:d2:05:ce:3e:6a:e5:aa:15:d6:7f:c3:8a:
fa:f8:84:fe:bb:4e:1f:8e:ae:fb:ef:4c:52:ba:34:
ca:bb:0c:07:1f:86:70:89:0d:ed:fd:b7:1e:50:8e:
69:26:aa:4f:5b:29:88:c6:3c:62:bb:fa:eb:3b:ce:
d6:c5:70:45:4e:67:d8:ef:fc:38:f6:e4:72:40:bd:
35:e4:aa:5b:c5:f8:cb:39:32:52:7b:3d:8f:17:63:
c2:f8:bf:b5:64:6d:59:d6:81:eb:39:cf:da:ff:07:
46:93:bb:86:b6:0e:e9:7f:5b:36:91:a9:57:18:70:
54:a8:83:db:5c:b1:af:56:67:e7:4b:bf:d8:3a:04:
7d:b0:11:bd:71:7c:ad:c8:5a:00:75:b5:e5:d2:db:
18:d9:7c:53:69:29:d1:46:82:42:32:51:e4:a7:e3:
86:64:e3:bd:09:0c:80:c3:b9:6e:86:01:59:bc:05:
8f:05:ef:7d:55:a9:81:e9:bb:ff:b4:7a:fa:fa:d6:
c7:82:8a:0b:e3:7f:4a:2e:41:f3:f8:28:38:b4:6f:
e7:4f:dc:b2:c6:60:a4:a2:59:cf:a5:1f:80:e6:7c:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:7D:2B:6E:A9:9B:9C:3C:18:3C:AF:E3:76:B1:9A:5A:A7:EA:E7
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:91:fd:47:6f:1e:e0:63:fb:c0:d1:4f:6d:c4:7a:e3:56:
13:cd:24:5d:0c:e2:a7:21:0c:62:a6:43:2f:a7:b1:75:93:14:
1f:d0:39:93:dc:61:21:2a:dd:cb:a5:0e:f4:ec:d9:ef:29:18:
67:5b:75:95:64:c1:2a:d6:94:08:69:36:71:e6:ea:cf:76:06:
d4:30:53:ef:cd:ea:3e:cf:4c:75:3b:cb:dd:ad:63:a3:78:96:
12:d0:83:c1:1a:4e:dc:69:ff:34:52:5f:58:04:c8:eb:bf:30:
93:9a:64:dc:89:dd:0d:d6:d4:96:70:91:d0:26:29:3a:d2:38:
0a:c0:6a:a9:69:36:83:9a:84:eb:a2:15:d6:a0:f4:51:7b:bf:
85:05:0c:de:e4:9b:dd:20:d8:1c:b4:4c:0f:89:3f:bb:41:c3:
70:1a:bd:49:72:dd:d3:ca:db:ee:3a:15:32:03:80:b5:bd:ac:
47:43:b2:22:00:3a:ce:d5:42:8c:05:fe:17:c9:a0:75:37:62:
a0:9d:f3:96:66:0d:a1:72:0e:3d:4c:b8:0a:18:85:c4:46:b6:
74:85:36:2d:ab:25:7b:23:09:43:18:a9:0d:21:ea:5c:9f:3c:
2d:f3:e0:f7:d4:71:82:08:a4:db:54:fb:e0:74:81:b7:8c:6e:
cf:6c:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:18 2025 by rpki-client