Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: Sdm2FxzDDqxzPumLT4YNX1Wooa8VttFeX9DDlfdaVLg=
Subject key identifier: 94:02:3A:68:E9:E1:95:6C:5A:62:1B:C4:E0:3D:15:83:75:D5:2D:9F
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 0198D66086252FF3FF84E9CC941AF9B3294A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 0819
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: G+bTpc4ZyAts/rmrtMrEIdo4jEXSlg/veG7a5kz8JLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:86:25:2f:f3:ff:84:e9:cc:94:1a:f9:b3:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=94023a68e9e1956c5a621bc4e03d158375d52d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:ac:f2:52:6c:0b:72:b3:ac:54:02:97:87:
c6:6d:f5:c5:6b:25:bf:a3:35:79:66:6e:67:2d:3a:
fe:4a:41:ef:76:85:b2:6f:7e:d3:35:1e:3c:d9:ec:
b3:19:b7:3c:8f:72:b1:2a:b6:9d:82:29:1c:cb:36:
d6:90:7a:5e:cf:6e:d7:da:1b:2d:88:db:20:b2:32:
e4:58:87:1c:07:32:48:6c:1c:95:47:cf:19:3b:07:
d0:84:8f:06:ed:a5:be:cc:ff:36:2d:60:9a:4f:42:
a4:06:bf:10:50:78:b8:21:34:7d:f4:5b:b7:f1:f6:
a5:60:4a:36:6c:b0:b7:0d:dd:19:6a:2b:5f:68:17:
9c:62:1b:c3:0a:2e:4e:bc:90:72:67:d4:81:72:48:
19:0b:13:c9:cb:71:bd:15:90:5d:29:87:65:55:1a:
7c:b7:fe:44:79:2e:46:14:85:c5:61:10:e9:cf:05:
71:50:24:b5:65:03:b5:12:fa:35:45:49:39:3b:b2:
b8:87:30:4c:df:d3:c9:93:c2:b5:d7:47:60:1b:4b:
82:85:76:da:2c:aa:7f:6a:96:6e:c3:09:f9:1f:65:
9b:7e:f7:f8:9f:35:c5:19:ae:8e:41:a4:3e:1f:4e:
15:6d:c0:0e:5a:45:dd:bc:31:81:0a:08:89:d2:8b:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:3A:68:E9:E1:95:6C:5A:62:1B:C4:E0:3D:15:83:75:D5:2D:9F
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3d:b1:d9:ca:e1:46:e5:d9:6b:46:f0:a6:b8:80:ba:0b:1f:
75:75:f8:3f:e5:18:4d:3c:35:c7:e7:d3:70:3a:1e:45:f6:d6:
92:39:66:16:dd:a4:29:78:b0:47:8f:f3:d3:a3:d8:a1:64:6f:
40:f8:81:fc:b2:ab:3b:f4:fb:60:14:48:7e:4c:e9:3b:49:f9:
96:63:10:97:b0:c2:e8:95:e5:2e:2c:c9:ef:7d:8a:9d:51:6d:
16:73:8f:98:f3:e3:66:8e:45:19:ce:3e:33:99:2b:fb:0c:81:
52:24:bf:78:67:66:64:da:bb:4b:86:b0:2e:99:6a:48:25:93:
e9:2f:9c:c1:92:33:16:bb:cb:33:29:95:14:22:e5:e8:35:97:
83:c1:2e:2e:44:cc:79:9c:73:f9:65:ee:8b:88:f2:ee:42:61:
46:f5:85:f3:96:70:60:30:66:85:c5:54:1d:5e:da:55:d9:6a:
1f:61:28:5f:39:2f:b3:0e:5c:9b:6d:fe:d5:aa:52:17:8a:6b:
8e:3a:68:a9:bc:0c:6e:de:d6:41:77:83:73:ef:e7:27:88:61:
db:f1:ab:9b:95:56:51:84:20:83:60:2b:a2:32:e4:d3:81:aa:
a4:1e:fb:2f:5f:ce:ca:f8:cb:a8:dc:60:1d:a1:79:6b:96:fc:
df:bc:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:28 2025 by rpki-client