
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier: yV7ZsKWCyPmOIKGvRO9x7VPfb9gb+r83wq/NHnzweIo=
Subject key identifier: AB:A7:EC:BA:33:C5:68:3A:C4:98:45:FB:C5:23:C3:03:75:78:6F:4C
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0198D4E007C13A203394DC7F7390FD945C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number: 139E
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: 5BvjTpw1w_WemifG7e3l7Fwub6E.roa (hash: iBuzSIH4RrP+9cpAm2pS5KWwWOhz5EVY1qvsY3CgLTA=)
2: 8K49Xpj4k5dyq2yRfoHAGiOSEeY.roa (hash: hmDY+ZS4NIOUWsCQUGN6/UlYo0A7Iss4LnNH2Vn6ChM=)
3: EIwgJdgCtKjSF1OnSZWkIAG5K2g.roa (hash: bhYZ1AB7z9n2WlipWCV/D9RvakS2owMjdFRvLRjlEoc=)
4: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=)
5: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: ZzNKUMUD73+SQgpA4RsK8CmlruDmR6xguoXdq0oZn64=)
6: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
7: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=)
8: tZ1_4m2w2psAaZQXIhS-9t_wi_8.roa (hash: rQXyCvnsYyi09/DywprJe+oCNTO4rAkfiQqg26rwwuY=)
9: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:07:c1:3a:20:33:94:dc:7f:73:90:fd:94:5c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=aba7ecba33c5683ac49845fbc523c30375786f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:a4:df:66:7e:c2:d8:fb:c1:51:ff:57:12:
af:aa:b5:9d:26:c8:5a:2d:e4:29:b0:d8:4e:ae:7b:
63:96:c5:48:4d:88:4e:b8:9a:57:09:74:05:5d:6f:
1d:35:e0:2a:b6:e9:ee:04:5f:a5:10:e0:d7:dd:14:
b0:f1:03:60:ee:81:03:75:9c:c9:e3:bb:ee:eb:e5:
fe:6e:57:95:b2:dd:55:b3:86:47:a0:b5:6a:b7:87:
d5:79:e5:77:56:47:3c:02:e6:d5:ec:8f:11:ac:5e:
24:0c:97:e3:21:2e:09:0a:38:69:15:d1:0c:69:1f:
98:56:d0:ab:d1:9e:36:28:78:11:25:47:d9:bd:68:
b8:1a:d2:b1:81:27:b8:90:1b:b3:84:a9:f3:73:6f:
56:55:2b:fd:ff:62:d5:7a:8a:7b:aa:ea:e1:50:aa:
b7:15:ab:0f:b5:50:39:df:2a:22:3c:e3:6f:a0:5a:
76:b0:3d:e8:39:0c:b3:e5:46:1b:30:32:b4:a7:75:
b5:fe:67:52:a7:8b:b0:96:52:ba:55:63:76:88:2b:
74:2c:81:71:85:c9:29:46:bc:73:16:ad:7b:04:94:
35:98:ec:3f:d2:23:04:ba:c3:1b:19:90:ad:ca:a8:
0b:ec:fa:b5:fd:04:c7:78:16:90:58:e8:9e:9a:95:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:EC:BA:33:C5:68:3A:C4:98:45:FB:C5:23:C3:03:75:78:6F:4C
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:4e:be:9e:b7:c3:14:be:59:15:6b:4b:09:b8:83:46:bc:
15:ec:3c:c5:f8:19:7b:34:90:45:c0:1b:90:bb:fa:68:9e:bb:
f7:ac:df:0d:41:04:1a:1b:23:b6:f8:f7:1e:5c:f1:e3:24:34:
65:8b:6d:73:dc:32:f3:98:48:6d:c5:07:9c:90:b2:92:7e:6e:
21:cc:fb:ea:c5:7a:fd:bf:5f:61:3c:20:6b:04:1a:40:95:dc:
21:e9:5f:2d:70:6e:bd:6d:61:da:04:bc:82:0d:b2:d8:b9:40:
f8:5a:e8:b9:96:04:b9:66:f4:bc:03:c9:12:ef:0b:1c:56:a8:
36:ab:1d:c9:87:3a:81:0a:42:03:a8:77:b5:3d:5d:ec:2d:0f:
bd:29:fa:ce:1f:2a:e5:21:f2:11:67:a8:99:e6:cb:c5:ee:45:
da:3a:e5:91:1f:9a:c3:a1:4c:87:62:b1:63:01:b1:30:da:fb:
db:4e:e4:50:6e:1a:81:32:07:22:b4:c5:07:54:5c:4b:6a:9a:
f7:b6:b0:24:b6:7a:ad:e0:5e:dd:23:0d:de:3d:8d:e6:6f:09:
cc:01:96:cd:be:3c:f8:27:9c:cc:d4:40:81:97:a2:41:35:6b:
61:7d:00:03:1c:f3:ae:58:1b:f4:d6:6a:62:b5:8a:a0:cb:f6:
62:d8:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:44 2025 by rpki-client