Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: xDj+e8r4D7a300/NPr1aZ8fIOhSAM0D+eaz+TT0xdvM=
Subject key identifier: 2D:D9:81:6A:FE:AE:13:54:A8:3E:81:72:7A:0A:C2:99:04:90:E0:14
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 0198D54E7E87EBB1B3CB9284AA70E3870C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0E0A
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: 9QOKIiKEuvzeByrqjLR74xgktd57DuIT+AaqQNRU9Ps=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7e:87:eb:b1:b3:cb:92:84:aa:70:e3:87:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=2dd9816afeae1354a83e81727a0ac2990490e014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:36:5e:42:e1:04:f9:e0:c7:be:d0:88:a9:
92:a6:9c:92:16:3b:ee:bf:4c:25:5f:f9:40:fa:70:
70:ac:4e:d2:f5:be:8c:0b:c1:fc:7b:f5:f7:33:73:
8f:4e:a8:d2:f6:47:d5:6e:fe:1f:e2:d6:3c:c4:34:
5c:10:2c:ed:8d:2a:1b:af:36:6b:34:3a:84:00:a3:
9a:97:b4:0f:ad:1a:20:32:50:5d:f0:4a:fd:84:f6:
93:42:84:5f:b0:e4:45:1e:15:58:e0:27:73:49:ef:
00:33:0a:fd:05:ce:d5:de:77:83:9d:8b:55:21:34:
85:64:6e:6b:cb:ab:3b:1d:e1:0f:46:d6:7c:69:83:
64:a8:70:58:a1:b8:cc:57:cc:bb:7a:48:f0:37:91:
45:0c:93:af:f7:74:94:22:c4:12:d9:4a:33:d9:fd:
48:7d:6f:8f:e1:59:32:94:bb:5f:54:13:bd:f7:fa:
6d:9c:7b:7a:a8:ac:a6:ce:68:63:b0:3e:9d:ca:1d:
49:19:c3:d0:cb:6e:8f:91:ba:a8:77:6c:26:b7:b2:
af:5e:70:a5:cd:90:1b:58:80:6c:1c:a8:77:e8:5e:
47:38:ba:e8:5e:7d:c3:aa:5d:bd:c9:11:a6:8d:1f:
8e:e8:90:68:30:54:a3:2f:58:4c:03:30:29:c0:22:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:81:6A:FE:AE:13:54:A8:3E:81:72:7A:0A:C2:99:04:90:E0:14
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6d:7e:b5:93:7a:e6:82:f1:8a:ac:8e:77:c7:c1:e1:fd:61:
9c:84:d9:fb:d3:62:be:1d:5e:ad:18:6a:54:2f:03:76:5d:f0:
37:19:a5:52:60:2c:86:e5:28:91:b6:bf:91:17:77:76:a8:a3:
1a:17:75:75:53:4c:35:96:46:30:1b:56:f0:70:47:a0:df:10:
b6:84:f4:84:0a:fc:cb:6c:d5:d1:58:9e:1c:4c:46:04:7b:98:
52:ae:2c:8d:e2:90:32:32:90:5f:77:77:4e:bc:ee:bb:10:78:
6a:5d:d0:1a:94:3f:3d:bd:29:ad:09:0b:70:13:cc:a9:fd:99:
d7:ff:27:c2:4a:02:1d:74:9d:0e:f3:59:91:55:9a:7c:74:d1:
12:ce:a0:cb:f0:7c:36:a8:ba:d3:52:25:70:01:1d:c3:cd:47:
5e:57:8b:86:09:55:0b:bc:33:f9:a2:de:8d:84:6f:67:9f:bf:
a6:ca:9a:03:4d:bb:a0:ef:91:75:09:a7:df:d1:48:2f:26:f3:
cf:e6:f2:a0:ab:f3:c1:84:ee:a0:d2:fc:fc:59:06:f2:34:9e:
97:a2:2c:60:d5:b5:39:ed:58:3e:a7:f6:d4:10:b2:b5:80:0f:
07:5d:33:95:97:a6:36:94:d3:15:79:ce:1f:dd:c4:52:f1:b7:
55:e4:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:37 2025 by rpki-client