Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: dR8XFP+sXzRd12FAMGHoc0wsaHqPn6abbYPYeOAAQt8=
Subject key identifier: F5:1D:68:CB:F4:D5:16:7F:B0:DE:1F:72:A5:63:53:0A:CA:4F:91:6B
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 0198D4A7A6E0899B0FCF32B74F3C23B7F784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 10ED
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: rzwADSQJZ/IHE6SDhtZgSo0N+AouH0mgpVPA1eOKM9A=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a6:e0:89:9b:0f:cf:32:b7:4f:3c:23:b7:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=f51d68cbf4d5167fb0de1f72a563530aca4f916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:9a:7c:44:d8:75:55:d2:75:da:58:c8:0d:
94:d0:e5:2e:b0:12:eb:6e:e1:0a:b2:b5:d0:ae:22:
6e:28:bd:e3:da:8d:b0:06:be:a0:8c:80:6a:ed:b1:
85:62:f2:7f:06:18:b4:00:4b:15:ba:25:37:f0:55:
6f:81:74:51:87:34:21:6b:49:60:c4:1f:5e:fc:36:
e7:96:17:86:91:d4:14:16:18:9e:27:ff:56:30:b8:
9c:27:ac:1f:28:41:82:30:3c:83:35:c1:08:ec:dc:
6a:23:27:0f:53:b7:65:8a:ac:4c:86:0a:c8:35:a2:
9c:ad:f1:64:ae:04:7e:f9:9f:6b:08:59:e5:bc:89:
0f:ff:71:92:83:c7:24:94:86:38:89:35:8a:4d:0f:
b6:53:13:23:53:9a:ae:1d:69:f2:70:e5:ee:a9:0d:
65:0a:dd:20:28:36:d3:8f:62:9a:24:d9:93:44:16:
61:9e:3b:f1:83:54:e4:cd:e0:ba:d0:54:d7:d8:9b:
7a:5f:9d:a8:cb:40:19:05:fa:23:b9:63:70:3d:d7:
43:ed:bf:d7:02:a5:b9:28:2b:b5:9c:66:e5:e5:ba:
70:0d:28:38:5a:97:13:09:e9:d2:eb:d9:b3:53:fc:
f7:b3:41:6a:98:29:d0:d7:da:0a:1e:28:89:12:db:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:68:CB:F4:D5:16:7F:B0:DE:1F:72:A5:63:53:0A:CA:4F:91:6B
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:cc:63:30:1f:ea:99:1a:b7:96:7d:44:38:4c:fa:54:f3:
bd:f6:63:9c:9c:71:f4:0e:d3:10:10:4c:01:c0:1a:33:ea:4b:
c8:df:14:5c:cc:1a:18:2d:00:d5:57:41:0b:af:c1:22:b9:9b:
16:08:d6:61:cd:e3:cf:c2:8b:20:9f:54:53:1e:1c:09:67:e6:
1f:c9:2f:f9:d7:ea:04:7d:6f:d8:1f:6e:82:59:a4:f0:9e:72:
e2:4d:cf:ad:37:31:6e:65:69:29:26:ec:d2:a5:2d:f9:a4:1b:
49:5c:38:f1:a2:53:be:02:ae:af:da:81:ac:2f:e0:6c:11:d0:
e7:6f:04:a5:2c:a4:27:a2:92:fb:b3:52:a0:df:91:00:42:0e:
ee:1f:c4:84:e8:bb:57:1a:32:71:12:cf:e8:d6:f8:67:3d:75:
d8:ef:5b:0c:14:9d:03:85:a4:f5:82:03:0a:8e:37:c0:f7:65:
aa:07:e8:84:e8:d5:f4:e2:f5:3f:e9:1a:10:2f:e8:ab:e9:6d:
a6:de:ef:83:e1:b9:24:64:dd:be:f0:82:9b:ac:5c:78:5f:cc:
d0:e7:55:de:75:d1:c0:bb:1f:54:4c:3f:59:06:59:e6:1a:00:
59:83:12:01:bd:f4:7a:31:aa:b2:a7:d9:64:15:14:72:13:22:
27:e0:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:39 2025 by rpki-client