Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: HwJky0PHd/Xrn7w8xu0Ge7SNDZwII+JV8fwuc2Cgx+w=
Subject key identifier: 1E:16:A3:F4:FA:FE:E5:1B:E9:0B:E8:7F:C0:D0:8A:33:3D:9A:00:30
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0198D5F1B0F251DBB121B8E63B4BCBE48CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 061B
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=)
2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: vXFTdCZ6DkHpTPErgJMTatL01ivLtQ8fawqiwYrCzgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:f2:51:db:b1:21:b8:e6:3b:4b:cb:e4:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=1e16a3f4fafee51be90be87fc0d08a333d9a0030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:44:ea:ff:e1:eb:10:ea:76:83:63:69:39:
8f:e4:9f:df:1b:02:56:82:92:ea:b8:ba:43:6b:ce:
de:3a:73:26:ae:96:9e:63:18:9e:66:5d:14:63:d6:
e8:bf:71:bd:76:a2:60:f5:13:e3:60:13:f9:33:74:
10:a0:92:c8:99:58:b7:0e:1a:4e:39:88:e6:e4:40:
b0:8f:23:30:d4:22:c2:fc:66:b3:71:04:55:ba:ef:
f6:66:23:70:ed:39:72:d2:83:6f:85:6d:6d:3f:a7:
9c:29:fe:7b:34:30:fb:39:e7:5f:f5:ef:d4:f0:4b:
e3:b1:f5:f9:65:0f:99:84:89:73:a8:9e:68:4f:51:
2f:fb:7c:47:0e:a0:9d:3e:67:e7:22:91:ee:f6:af:
52:d5:d6:3c:c4:c2:bb:81:0f:32:59:b1:84:fe:1e:
60:d2:fc:6e:0f:c9:ad:61:81:ce:3d:53:22:ab:f0:
20:a0:74:ce:1d:ea:c4:5d:9d:bd:b1:be:80:e4:a1:
df:e8:b6:ea:70:0c:43:8e:39:4c:f5:53:ee:14:b6:
b4:0e:df:c5:30:fe:dd:bd:6a:55:93:a4:21:af:cf:
29:e8:37:45:7f:95:71:6a:f6:60:57:36:80:96:9b:
13:06:2e:33:10:eb:53:18:cd:20:14:78:0f:b2:ad:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:A3:F4:FA:FE:E5:1B:E9:0B:E8:7F:C0:D0:8A:33:3D:9A:00:30
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:c2:27:e6:e6:9e:19:5e:db:7f:8b:23:3e:5a:3f:a2:41:
51:2d:b1:3d:c7:66:ac:48:01:09:bc:e9:6e:a2:a7:bb:05:ec:
4f:ba:fa:2c:e2:ed:6f:cf:01:3d:ae:df:10:07:13:af:26:b4:
8c:2b:26:dc:73:9e:a7:b8:53:b5:5d:21:21:bf:6e:c2:14:ae:
f3:4b:2b:84:b0:34:76:51:16:32:bb:74:9b:df:a5:3e:04:cd:
48:3f:e9:60:6c:64:4e:a2:ed:33:6b:13:a0:32:d2:2b:39:7a:
9b:e0:11:af:da:3b:d3:f0:df:b5:3a:42:91:15:c3:2d:27:ae:
0d:2a:eb:52:c3:6b:5b:90:2f:e5:0b:d7:5a:51:10:ee:b5:ea:
5c:b8:13:49:00:17:18:c1:fd:9b:56:95:8d:de:77:e8:3b:7f:
f2:22:31:1d:e8:f2:df:8c:90:d7:41:9e:05:67:1e:9b:95:07:
ff:13:85:33:c4:78:02:fc:e3:4e:38:aa:fd:75:d0:85:dd:d2:
dd:cc:79:a8:d9:3c:f7:fe:52:27:f4:2c:2d:06:b9:ed:8b:61:
96:4a:36:0d:55:1f:fb:09:11:c8:ff:17:69:a6:8c:67:ca:01:
26:e0:0d:6d:cc:fd:40:2c:19:42:bc:0d:6c:77:5e:2b:1b:8f:
bd:14:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:51 2025 by rpki-client