Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: o1tD5hRCLJdEjkZhMnvSjqKSEf2FtxkG1lFGXjuujHE=
Subject key identifier: D9:3B:A7:E0:C6:BA:53:33:88:46:DC:78:FC:0A:F5:E6:09:09:B7:1D
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 0198D65F703072252C1B56F707EAF73BA948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 14BF
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: lq4AmlENla/BaXGxyMIHvVlg8zghGabYESBBrD5H0b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:70:30:72:25:2c:1b:56:f7:07:ea:f7:3b:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=d93ba7e0c6ba53338846dc78fc0af5e60909b71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:f9:36:f5:77:c8:f9:27:bb:ca:e6:1d:9d:
cf:8a:ef:b8:fa:b4:a0:42:1b:e1:41:89:ba:fe:cc:
4a:ec:e8:fe:af:eb:53:f5:4e:00:08:37:d9:ec:d8:
41:5a:77:68:3d:58:d1:26:88:50:64:3e:eb:90:e0:
c6:c6:1c:ad:df:2e:5d:3d:71:b3:35:34:07:4f:16:
60:ac:59:a9:1a:f8:da:9a:5e:25:02:ad:d8:68:1b:
be:be:88:64:4f:f8:3f:e8:a8:34:77:88:19:89:7e:
fd:7e:cf:8d:bb:2c:5a:6a:ab:a9:ca:f7:6a:4e:89:
0b:b4:53:28:12:18:4a:f4:e0:ee:0a:89:fe:7f:a1:
7f:16:2d:c2:37:75:d5:a2:28:56:8a:9d:fe:3a:d8:
c7:8e:11:b4:2d:e4:e5:f5:d5:3f:81:75:68:cd:b3:
f2:e9:da:4c:9a:32:59:a9:0b:62:f7:19:ce:c9:37:
e7:44:b5:6c:67:24:4b:9e:e9:70:99:cc:1c:ae:85:
12:82:ac:0d:26:0d:6a:83:23:fe:a2:83:cc:9b:8c:
2e:b8:e0:61:b6:45:34:87:05:39:3b:f6:dd:a0:54:
94:c7:36:7f:ab:c4:ea:7a:22:03:0e:64:af:b1:2b:
7d:e2:a3:b8:0e:49:7b:3f:69:4f:f5:09:89:b5:e1:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:A7:E0:C6:BA:53:33:88:46:DC:78:FC:0A:F5:E6:09:09:B7:1D
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:e7:bb:25:44:1c:78:ac:f4:ae:96:21:91:2f:15:76:f2:
b1:d6:89:45:8f:95:95:6c:59:cb:2f:a1:29:94:bb:3b:16:17:
9e:a9:b9:cc:34:81:e1:bd:50:ec:76:60:ca:a0:ef:d6:57:94:
83:17:50:9a:31:f1:a4:60:3b:47:2d:d3:22:50:8f:0b:49:f0:
80:db:54:80:52:ed:3c:57:c2:48:cb:dd:03:e2:67:dc:e4:0c:
23:60:a9:6d:6b:88:f0:39:51:43:48:67:d9:a3:72:75:53:70:
f3:68:7f:bd:d8:06:1f:c7:45:3d:2c:3e:e5:76:d4:b4:bf:87:
56:5f:12:e0:a1:4d:90:0a:a4:b3:25:b4:b8:98:46:af:79:3d:
b6:95:bc:70:3a:cd:23:c3:90:3b:2d:c4:71:8a:31:29:8d:fe:
7a:df:d0:f6:67:a1:fc:cc:6e:2c:ee:91:ef:87:4b:86:b4:2a:
08:30:0a:3f:89:17:28:5d:2b:0e:8b:43:a2:dd:a5:8b:53:9a:
56:e4:5a:fc:bc:46:c9:a0:80:75:ac:7b:e6:14:e7:fb:b5:aa:
4e:bd:6f:fd:66:07:ff:5b:15:55:5d:b5:69:3b:4d:9e:da:6b:
4d:59:3d:53:8b:a1:8b:6f:65:cb:7a:d8:16:93:17:24:b3:8d:
8a:ca:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:12 2025 by rpki-client