Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: k3YnECL+iWj0M388+AAPkOcpBG8HwJ9hu48GKH/hZYs=
Subject key identifier: BD:0F:D0:A3:DA:2A:93:81:F9:CB:FC:68:E6:A1:7B:02:66:2D:D8:1F
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 0198D73AFCB340207E29E13BDB675F94891E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 11A2
Signing time: Sat 23 Aug 2025 14:00:23 +0000
Manifest this update: Sat 23 Aug 2025 14:00:23 +0000
Manifest next update: Sun 24 Aug 2025 14:00:23 +0000
Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: TC3mYp9VEiK2HpuvyfUHkwqRaZQHdpk/kfdPp1i7e88=)
2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:fc:b3:40:20:7e:29:e1:3b:db:67:5f:94:89:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Aug 23 14:00:23 2025 GMT
Not After : Aug 24 14:00:23 2025 GMT
Subject: CN=bd0fd0a3da2a9381f9cbfc68e6a17b02662dd81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:09:c4:22:77:ff:67:14:3e:ff:c8:d5:a3:06:
52:78:82:a4:12:8e:89:4c:31:88:40:dd:7f:65:b2:
79:f1:e5:08:ca:ef:b0:54:b6:b6:32:6e:d6:47:81:
9f:8f:bd:68:ac:b3:bd:12:2e:51:4a:3a:3b:f0:bd:
5f:d0:94:81:9b:60:ab:7c:60:ca:36:e6:65:a5:f5:
37:7f:ea:f9:ca:a4:63:3a:ab:2d:c1:a2:02:c0:d8:
2c:18:25:89:1d:86:c4:3e:31:82:af:d1:d4:2c:19:
fc:4a:5a:f7:90:ea:e0:62:55:7b:4b:bf:09:a2:1c:
7c:77:b2:73:10:01:2c:56:8c:93:65:b4:5b:32:8a:
78:a0:c5:c5:5a:27:f0:5c:1e:3a:66:27:30:ac:d6:
d1:bc:51:b1:11:28:ab:8a:26:1d:37:85:21:cd:8a:
b6:a9:f4:1e:4e:5f:b8:9b:df:e1:28:ec:ad:76:d7:
d8:b8:f7:ef:e5:7a:f4:40:38:8a:2c:3a:06:58:10:
c3:b0:79:47:6a:2e:59:9a:ee:4b:c0:df:7a:db:37:
e9:e9:fc:ef:bb:4b:08:05:41:0b:29:a7:7a:2d:58:
69:83:ea:aa:fd:3f:85:6b:67:51:20:2f:61:f0:05:
30:04:68:99:26:3b:7f:21:37:5a:ff:24:34:37:d7:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:D0:A3:DA:2A:93:81:F9:CB:FC:68:E6:A1:7B:02:66:2D:D8:1F
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:da:eb:e4:66:83:10:51:00:ce:dd:27:11:fa:8e:83:55:9d:
d0:64:2a:c2:31:e4:ff:81:3b:44:ed:47:a4:4a:bb:8d:d5:f9:
6d:27:8e:5d:87:89:09:a2:00:f3:18:35:7c:f5:dc:9d:7a:cd:
1c:d8:40:cc:13:81:9b:6d:75:3f:aa:c5:97:07:a1:b7:87:58:
86:ed:e8:7c:a6:e8:f0:f5:11:02:45:ff:56:33:2b:7f:d2:d7:
53:8a:81:95:7c:a3:de:1b:d2:09:e2:d0:66:2a:be:f9:60:08:
94:a8:da:ff:a2:54:11:86:ef:8b:a5:a6:fb:af:a3:8c:75:5e:
1f:c6:39:f5:00:36:04:09:6d:7c:4c:c7:14:15:40:ec:84:ea:
78:1e:aa:ee:6c:34:96:3b:9d:a5:3a:99:56:1e:d9:8e:af:ce:
c6:fa:bd:6f:b4:3e:6e:73:c1:31:3e:9e:c4:8d:0e:64:03:1e:
af:56:e7:0d:f9:03:f5:ce:01:63:aa:d4:42:03:6e:ab:21:53:
98:9b:48:3d:a7:ae:bb:01:39:20:02:36:00:11:4e:11:41:d1:
1f:7f:0b:22:ca:1f:76:87:ba:71:bd:a5:a6:9d:7b:2c:27:03:
c2:a2:83:a5:18:98:46:1e:8a:9a:18:f0:f2:b1:ea:c2:ff:5c:
30:49:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:46 2025 by rpki-client