Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: i8OTYiuhEUV3Bj0UBWTeKCBpcrwKgRELJC1wABjk0NI=
Subject key identifier: D2:AD:2C:96:4B:07:31:86:3C:7C:A2:2F:CE:93:01:C0:17:8F:F2:9C
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 0198D73B1108CF6EEE153C5882945376646E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 143A
Signing time: Sat 23 Aug 2025 14:00:29 +0000
Manifest this update: Sat 23 Aug 2025 14:00:29 +0000
Manifest next update: Sun 24 Aug 2025 14:00:29 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: iGz+W5I6SXyMywDCxwy31D+ZHTfW2ZHUVWvTvUhqKDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:11:08:cf:6e:ee:15:3c:58:82:94:53:76:64:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Aug 23 14:00:29 2025 GMT
Not After : Aug 24 14:00:29 2025 GMT
Subject: CN=d2ad2c964b0731863c7ca22fce9301c0178ff29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:dd:3c:70:f7:8a:33:e4:8f:d3:7a:98:e7:
34:60:e7:4f:db:20:3a:fa:34:2e:64:f4:d8:c4:a7:
fc:af:b3:b7:f6:56:e5:14:d2:c6:d3:c8:43:69:c5:
bb:fb:9d:91:9a:91:cd:2f:c2:ba:23:d8:7f:62:fe:
f4:a0:d6:6f:87:57:78:c3:2e:01:fb:d2:ec:e0:34:
bb:15:2f:58:dd:c3:c9:38:8e:49:75:62:d4:53:f1:
89:f9:fe:66:a9:46:8f:ae:20:f5:99:bd:e0:b7:72:
75:36:fb:12:58:37:a7:07:a4:25:98:a9:6d:fb:6f:
ba:94:37:7e:7e:bc:26:1f:d5:bb:fc:28:fb:3b:3b:
cf:30:1a:00:3e:33:cb:b6:29:da:65:1d:f4:6f:05:
95:d9:e7:a2:0d:f1:1f:df:69:f8:f9:78:26:44:34:
fc:98:d9:6d:1a:64:92:ba:9c:3c:63:39:6d:66:c4:
ed:19:4f:25:7f:52:21:e3:a8:ea:46:cd:c0:6b:57:
f9:34:ca:72:59:66:ca:c3:85:e6:b7:fb:25:b9:cf:
ab:4c:20:39:ac:7e:b0:d1:88:d7:d2:0c:75:91:6a:
af:d9:80:d4:c7:7b:be:e0:f8:f0:fe:b0:1a:49:38:
ef:93:e9:15:1b:ed:13:d3:c5:b3:09:76:54:2d:33:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:2C:96:4B:07:31:86:3C:7C:A2:2F:CE:93:01:C0:17:8F:F2:9C
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:25:e4:47:cf:9d:8c:a5:d3:a6:90:eb:f4:0c:1b:b8:fd:
86:b7:b3:21:53:ad:3d:d8:a2:e0:26:64:f0:d6:52:c6:75:54:
7b:62:3b:18:b6:ad:86:61:2e:a4:03:cd:19:db:20:4b:35:29:
4f:bd:e8:e7:6a:cb:06:b0:b5:45:b9:d8:97:65:90:e1:05:22:
a6:86:1d:c3:f1:c7:72:c7:59:34:5d:e2:da:f1:3a:74:aa:90:
5f:02:e8:11:10:6b:28:1d:53:0b:67:9e:37:64:6a:6d:7a:c5:
3e:fc:09:b3:bb:46:31:46:23:36:67:1d:74:07:6c:6c:5a:b8:
4d:bf:79:4f:39:69:0f:f4:6b:e5:f2:f8:55:23:f1:48:0c:8b:
60:f7:c2:73:0d:fe:38:96:cf:67:e8:6f:6a:ae:49:3f:1c:73:
49:87:6a:1b:5a:02:41:f7:63:ae:5c:30:db:e1:03:67:da:97:
b3:a5:6e:77:9b:53:8d:34:71:47:d6:01:0e:aa:c2:16:73:ab:
aa:51:4b:41:9a:60:bf:e7:0b:dd:d4:90:91:dd:74:ad:df:ef:
3e:64:07:11:75:95:d4:77:8e:0c:c9:c1:27:2b:da:91:b4:30:
fc:ca:25:2d:06:de:e6:dd:90:2e:57:ae:4d:65:c8:51:32:95:
91:e4:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:10:54 2025 by rpki-client