Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: lIKW4myRWlVk7GOnK1BtEPv6Lpb8pLEipYiu+FCpp2E=
Subject key identifier: F5:87:2B:99:94:23:6C:E7:28:50:F7:AA:E9:08:C3:A8:D3:32:7D:A3
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 0198D4E01B6BA8834BC3AA5F0008ACEF9C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 1427
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: ssQSLeg+n7E4yGzf4PyLx1FQ9KMyrBS5VS3lZgOeccY=)
2: O_uEU5a5hFxcQ9cF5vOgcBailtI.roa (hash: am+LoRbwPcUWGmyLF541pRdLLSbuzmsIRCZ85z19J6M=)
3: _MZl5mAk0VStSl6-Iutzl1XZEmc.roa (hash: GAxNehsNlSM4VBui+WLkl0ufFvlsHnC2diPLD2P3m8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1b:6b:a8:83:4b:c3:aa:5f:00:08:ac:ef:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=f5872b9994236ce72850f7aae908c3a8d3327da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:a8:3f:0e:19:f2:fc:ed:2d:99:10:d6:50:
48:0b:4f:7b:46:c4:70:c2:db:7a:a9:4d:25:56:e8:
16:3c:87:bf:bc:4b:4e:42:0a:25:1a:8a:0b:99:af:
7a:23:63:b0:4f:50:96:a5:f0:92:fb:b6:7d:f4:43:
df:fa:91:78:e3:ac:34:e2:52:32:58:5a:e7:b9:9d:
b3:ce:ea:06:f6:83:a0:39:35:10:83:38:07:b3:cd:
fb:04:9f:57:f0:bf:a2:bb:c8:f6:0b:45:69:3b:a2:
8b:3d:e3:a5:df:94:3b:96:63:e9:06:4c:b4:60:1a:
d1:03:7f:15:67:48:63:ab:b0:22:2c:a9:e4:ff:cd:
f6:40:4e:71:5c:bd:17:59:a6:01:f0:cd:25:50:df:
15:39:c2:14:59:81:d9:ac:3f:cc:3d:cb:26:e7:5b:
c2:8b:cd:7d:59:1f:30:e2:0a:a7:da:a1:d2:39:72:
65:e7:bf:b8:4a:e8:52:b7:67:eb:ff:89:d3:23:27:
7b:bd:82:65:51:06:49:c7:56:c1:73:8f:69:cf:53:
a1:60:9e:df:59:ff:b8:19:54:ba:51:ac:b0:7a:ef:
7d:b9:8a:9e:3f:a2:63:e9:f7:7a:f8:39:a2:5b:e8:
09:23:79:62:cb:d8:42:0b:bd:99:24:bc:2b:74:b3:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:2B:99:94:23:6C:E7:28:50:F7:AA:E9:08:C3:A8:D3:32:7D:A3
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:15:ec:fa:f6:0f:ce:20:55:b8:b5:00:c9:26:17:12:d9:
2c:9f:42:b0:84:7f:5b:80:d8:9f:4a:51:3e:1f:a8:88:0d:ca:
d2:75:be:e6:c5:65:d1:e9:86:b4:67:b7:ef:2f:bf:30:b6:6e:
64:02:ed:9c:a1:d9:6d:76:b7:50:40:b0:28:03:6c:13:00:e1:
c1:48:40:ec:93:16:f0:62:bf:1a:e4:eb:c0:b8:b2:53:ae:d8:
8b:35:26:71:12:e6:9e:1b:e8:93:4b:22:f2:d4:93:de:9f:92:
e0:77:af:a1:2d:75:60:bf:81:3a:2f:6f:f3:fa:74:f8:61:ef:
89:ce:48:46:e2:6b:cd:c2:4b:ca:8d:c0:52:64:6c:cd:ac:34:
28:b5:90:af:18:fa:5c:ff:6c:4d:2e:6e:78:07:eb:42:b2:86:
98:6a:f5:f2:28:1b:07:7d:77:1c:43:52:ed:e2:f2:07:0a:80:
26:cc:6c:73:54:58:a6:16:00:f8:b5:b6:b6:9f:8e:c4:e0:24:
e2:7f:95:38:84:73:6f:ea:ee:a5:6a:be:17:81:71:05:ec:83:
d8:75:ce:a2:1d:57:77:2d:13:c5:aa:1f:c8:34:58:7f:8d:d1:
f9:d5:8d:3a:09:29:c5:3c:7c:17:f9:e2:a8:25:47:5a:d3:ca:
95:fc:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:56 2025 by rpki-client