Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier: 30f63U31u/NOkDPN1VvxyGtbS8KNmMtgClE4Y6QUzI4=
Subject key identifier: A3:12:C9:77:16:7C:57:A0:AE:3E:39:60:DC:AE:57:8D:E7:BC:BF:49
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 0198D7059B10616252F7BAD79E73E2D906B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number: 0F39
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=)
2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: gw2gBN9jQoH/iLY6VnQE+Rv0qzgS+Gg9xys4vBfUamI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9b:10:61:62:52:f7:ba:d7:9e:73:e2:d9:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=a312c977167c57a0ae3e3960dcae578de7bcbf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:99:dd:a4:e7:55:21:62:f3:68:9e:ff:46:
5f:92:d9:2c:b6:b5:0c:dc:eb:1e:27:ca:76:82:9f:
c0:3c:52:5e:2a:a9:02:1a:6a:7e:13:0c:ca:e4:a7:
c8:75:fe:37:01:c2:02:a7:3f:4c:57:11:12:61:c4:
19:25:9c:cd:d4:67:fe:6c:bb:32:e3:e0:19:24:d3:
44:c6:fa:62:cd:2e:7a:46:93:9c:3d:4c:0d:ca:9f:
d1:9f:72:b9:08:6e:b2:9e:c5:a0:e4:29:b7:5d:20:
83:b3:ac:21:30:41:14:16:b8:15:49:62:65:b8:0c:
6a:eb:53:62:12:66:42:91:7f:7c:c6:72:15:49:25:
0c:d9:b1:2a:be:0b:56:cb:fd:d7:87:d9:41:5c:95:
83:0a:a6:2a:56:41:59:7d:38:95:4e:da:be:4d:0c:
ca:5f:26:99:12:cc:8d:1d:2d:20:f1:28:4c:e3:65:
3b:f2:39:79:7d:16:fb:fb:2f:6c:b7:0a:36:9d:9d:
6a:0e:8a:35:56:a4:78:39:26:d7:ab:d3:14:79:aa:
a1:b1:35:df:41:d0:00:cb:53:d8:0e:75:18:66:f5:
80:d1:55:29:54:44:23:e2:ee:60:ca:59:4f:f3:ca:
40:11:d6:e0:7d:0b:84:f0:9f:66:b5:23:b6:d5:dc:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:C9:77:16:7C:57:A0:AE:3E:39:60:DC:AE:57:8D:E7:BC:BF:49
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:60:c1:4f:a4:ce:2c:6d:aa:0a:f2:e7:0a:a2:cc:ab:d8:
df:00:a0:ca:45:4d:9a:a9:32:80:08:15:4d:3a:88:e9:09:87:
5d:d7:63:9e:33:12:41:57:d5:71:44:47:15:85:b2:84:20:df:
c7:66:71:6e:da:20:cf:cc:a4:a9:55:38:e2:45:5f:cd:78:05:
d7:51:6e:bc:a3:4e:1a:fe:20:d0:bd:77:0e:f4:e9:b1:6d:bf:
af:29:f6:45:d0:d9:a0:ba:34:ef:23:29:9b:cd:3b:4e:76:86:
44:28:91:93:7b:e7:e3:f1:92:a5:60:5e:8e:34:b7:c1:ef:6e:
5d:5a:2f:0b:aa:21:cc:00:c2:a9:45:ac:a2:5e:0e:a4:2a:37:
18:25:e0:d2:64:08:b4:a1:19:00:7f:ec:c3:2e:20:36:9c:e8:
c9:68:11:7e:e0:e5:31:3e:53:c5:6a:cc:d7:c4:af:ed:d3:4e:
41:87:16:2a:3f:4e:24:ba:6d:55:04:9b:87:54:39:7e:b0:1a:
98:4c:3b:0d:82:00:01:70:17:37:e6:ff:13:6c:60:37:e8:ef:
3d:49:70:5e:98:ab:35:15:bd:ad:66:dd:2e:d3:bb:ed:b0:ad:
11:6a:d7:51:71:7e:fd:08:92:e6:40:e2:4a:8c:e8:8b:32:74:
3d:6e:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:18 2025 by rpki-client