Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: ZnPGJUJiHc/bQpBL6Xot4ivW2XE6SyeoCEN/ltJKv7I=
Subject key identifier: 27:EE:48:95:9D:A9:10:A1:78:46:FB:90:91:F8:0E:C2:B4:F1:EE:6C
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 0198D6602AAF34E4FA3E4605E9FF8292CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 04FC
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: PxJoTR0vfmvv52LNBWs/mzmsBKfd50iwHbsqSZUCp3I=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2a:af:34:e4:fa:3e:46:05:e9:ff:82:92:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=27ee48959da910a17846fb9091f80ec2b4f1ee6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:49:1b:d1:80:0f:a3:07:ab:fc:be:51:0d:
31:37:10:f8:d5:b0:f1:fd:df:dc:72:b9:2a:2e:f2:
2b:84:1f:4f:b1:f1:20:10:63:18:b3:27:67:86:c5:
49:53:61:ad:1f:1b:31:49:39:cc:2e:86:a0:84:fa:
a9:17:f0:24:7a:51:56:57:6b:c8:8d:b0:fc:43:b6:
33:70:d6:af:20:00:21:03:2e:11:7e:30:94:0b:20:
d9:ff:a5:db:49:3a:51:7b:5f:0f:b5:d2:49:cb:79:
76:15:b7:e3:75:5b:25:fc:16:34:7d:d6:8f:77:35:
9e:88:90:42:a4:ce:4f:ca:4c:22:43:0e:eb:cb:c4:
dd:f3:5b:89:87:ad:6d:64:4a:33:5b:d8:6b:5d:35:
7b:f8:86:37:d8:69:bc:b6:fc:d7:62:87:dc:a2:f4:
7f:67:58:a0:11:0f:c0:b9:29:26:85:4d:50:4c:3c:
d1:3f:6a:79:50:61:ea:d4:65:30:1d:1c:0d:a8:9f:
6d:8f:92:c7:ec:23:50:a2:f7:f3:a5:c6:c2:0a:24:
c8:f2:e1:69:d3:f9:06:29:16:bc:50:b5:1e:18:a7:
c5:32:39:ea:ee:65:b1:be:6b:74:6b:61:39:45:04:
b2:b6:de:fd:d5:84:a8:2c:bd:cf:3e:14:b2:70:64:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:48:95:9D:A9:10:A1:78:46:FB:90:91:F8:0E:C2:B4:F1:EE:6C
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ce:70:fd:ff:46:c2:70:56:bc:d2:2e:76:12:23:e2:5f:76:
9e:b0:94:ea:48:e0:ab:59:66:2e:68:19:c7:1b:37:51:7d:63:
e0:51:8c:54:b6:33:d5:b0:48:35:f4:44:66:87:c1:98:d8:8e:
c7:f7:4a:db:fe:7f:e5:71:82:e8:64:f1:7d:4f:e8:ef:93:de:
68:1f:39:0c:b2:88:d1:75:2b:c8:e3:73:91:46:7c:06:ba:23:
03:68:67:33:e9:de:97:8d:b3:a4:91:9c:53:4d:7e:12:e7:b9:
fa:f1:c3:2e:14:39:01:9c:f1:d9:bf:4d:d2:d2:bc:4e:d3:8c:
04:aa:90:cc:c8:2e:11:a9:9b:b6:d1:0f:dc:a0:85:1f:d6:ce:
bb:c5:f0:14:37:b0:ce:31:df:ca:aa:b3:f4:3e:81:52:b7:3a:
ec:b2:6b:8b:3e:8e:cb:29:53:4d:0b:73:11:d9:3a:ab:d1:7d:
95:eb:d6:fe:31:0d:ec:ad:98:cc:45:43:e9:3c:a8:2d:f6:b7:
8c:0b:7d:99:87:87:98:c0:e5:02:1e:dc:8d:a4:42:df:c5:fc:
bb:99:fa:7a:02:ff:e1:16:5d:18:d8:14:a2:d5:9e:1f:8b:c3:
e1:d6:66:c1:04:dc:df:56:05:37:21:eb:13:24:08:0a:b9:4f:
07:d3:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:22 2025 by rpki-client