Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: BGxmIIa31bI/++QSDq4zAOT7yC5uvHJ14qbYdH8Feeg=
Subject key identifier: 53:1F:DA:AD:4B:DC:9B:FE:1C:1E:AE:D7:D9:FF:BC:C4:69:C7:2A:53
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0198D4725210968C524E81CDAFF3C3EA27E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 06AD
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: CFyreRKdu-UuhcLcuXS_I2Vcqxs.roa (hash: ctEJwL/F+KcP8ef2uPLwsHUQYLkUqUkmlW8U9dtbbuQ=)
2: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
3: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: ziRSegI2dp63tacpGgFOtxEJ44Jvucjn7O6Y/N1Wupw=)
4: znoNBWia6W4C86fr-Er9zSBt3z4.roa (hash: 1cEa5kNLaAjAN6SHoWeZJLbyNheUqXOgYyH2CJfaeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:52:10:96:8c:52:4e:81:cd:af:f3:c3:ea:27:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=531fdaad4bdc9bfe1c1eaed7d9ffbcc469c72a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:3e:36:52:50:65:d3:7f:0f:88:39:88:70:
b3:a0:95:38:f8:64:ac:37:f0:7c:a8:08:2d:49:89:
b4:ac:73:81:ba:fb:b2:55:5a:c1:8b:4a:29:a3:60:
3a:65:dc:7b:aa:c9:7a:7c:29:2e:d0:de:d8:10:42:
80:88:8d:c1:99:23:83:e6:cb:9f:8f:4d:f4:ed:87:
e8:1a:ce:94:05:bc:d8:4c:ca:9f:78:dd:14:49:74:
f2:d6:19:59:ce:ab:02:ef:b9:90:8c:70:fb:5a:fd:
7b:11:e1:8f:4e:74:b5:e2:e5:2c:38:d8:db:cc:92:
e2:09:ba:51:45:20:24:bb:72:2d:4c:98:39:6d:b9:
10:2f:55:89:4b:e1:85:0b:2e:60:8a:97:f6:3c:38:
28:e0:84:49:02:3d:c0:6b:f3:ef:a1:f3:5a:75:f3:
49:c8:c0:ee:18:b4:dd:0b:e8:5f:73:fa:cf:a9:1f:
4f:7c:43:01:5a:95:fc:90:03:2e:dc:ec:4c:5a:32:
38:d2:53:6f:9b:e9:05:e4:c2:e1:ed:94:e7:10:2b:
49:85:4d:b4:98:78:90:4a:19:34:8a:63:f2:c6:87:
60:c0:e8:79:66:08:55:d0:36:9b:fd:57:19:6e:8e:
94:c6:7d:29:95:c2:81:2e:c3:40:71:87:22:65:c8:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:DA:AD:4B:DC:9B:FE:1C:1E:AE:D7:D9:FF:BC:C4:69:C7:2A:53
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8f:d6:80:8e:ee:e8:0e:dc:a3:22:62:96:53:5b:93:cd:e2:
b1:b9:eb:6c:2a:00:fd:8f:8e:77:e8:cd:1e:9c:45:b3:8f:f6:
3e:d1:d7:2d:df:07:66:79:cb:cc:a4:b6:06:95:13:8f:c0:7e:
d6:3f:2d:82:35:02:d5:08:00:42:f9:b8:5f:f6:53:2a:63:c6:
1f:d1:b4:d0:1b:50:68:29:e9:97:e8:96:15:85:95:1d:f8:45:
04:bb:2c:ef:14:bd:32:af:c1:58:36:b6:ab:a4:b8:4d:01:39:
d7:0e:53:22:78:46:57:d6:40:10:02:c4:ba:67:18:c0:58:d1:
b4:26:19:ad:e7:83:5d:90:26:fd:e9:fb:f2:29:9a:a2:10:d9:
76:f1:b4:8a:bc:c2:a0:f8:73:db:f9:67:f5:29:c1:a9:55:e2:
fa:76:00:92:0a:e1:d8:13:44:ca:cd:d3:fd:88:d1:9d:2e:69:
94:ce:42:6f:a8:8e:fc:ee:82:56:a5:80:71:e2:f8:48:6f:c2:
fc:de:5e:85:f4:5e:99:ff:79:4d:07:50:96:dc:d7:73:d9:b2:
77:fb:c1:d7:cb:dd:41:98:55:86:53:0e:ec:8a:71:62:06:35:
9f:00:6b:d5:50:1a:cc:8b:9a:da:7e:83:11:ea:84:84:5d:52:
e4:11:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:01 2025 by rpki-client