Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: yDJeWofLsupEZ7a4EpQiAnXV06zLOOUuygqsKBSx1uw=
Subject key identifier: DB:54:08:F2:F8:E9:9B:E2:7B:76:4D:0F:7D:6D:AE:DA:4C:99:BF:DF
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 0198D51654B94595D5981AC32FF7A0B1C845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0EA4
Signing time: Sat 23 Aug 2025 04:01:07 +0000
Manifest this update: Sat 23 Aug 2025 04:01:07 +0000
Manifest next update: Sun 24 Aug 2025 04:01:07 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: 7h6buk3xmEQlaIQCm8pDwMlED2Eae9BCktho+BT4GJY=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:54:b9:45:95:d5:98:1a:c3:2f:f7:a0:b1:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Aug 23 04:01:07 2025 GMT
Not After : Aug 24 04:01:07 2025 GMT
Subject: CN=db5408f2f8e99be27b764d0f7d6daeda4c99bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:a9:dc:45:b9:12:30:b0:dd:9c:12:e8:e3:
03:54:30:85:32:b8:ee:8b:ea:6c:ee:92:84:41:ab:
5d:1f:3e:ba:ff:3a:76:71:fd:9a:7a:3a:6a:43:b6:
8d:a2:cb:1b:40:21:3d:26:4e:4b:ed:3e:19:08:83:
b5:0c:54:e5:7c:06:0f:87:fd:7c:fc:a5:72:b2:ad:
1e:9e:c0:89:a9:96:2a:67:ed:fa:76:16:82:9c:f0:
e4:7e:98:c9:03:53:76:91:32:59:37:d1:b3:b2:8d:
c7:b7:7d:e1:9e:5d:8f:43:d2:42:ac:eb:f1:f2:d4:
d8:3f:5c:ba:d1:a8:90:f8:7f:59:74:e5:53:8b:60:
02:98:01:18:63:ec:df:76:04:9e:0a:f7:c4:d2:02:
42:1e:e5:d0:5a:64:43:62:ba:24:c1:59:75:79:c1:
59:33:81:3c:8e:a3:28:5f:8f:bd:14:d7:7b:ff:d4:
63:24:3f:d4:34:29:04:ff:a9:ca:97:33:8c:0d:50:
2d:79:99:da:36:7c:67:8a:4b:c9:9b:e1:a0:26:bd:
47:c2:5a:20:a2:f3:a6:f6:3f:cd:73:f8:20:35:f5:
e8:3e:48:53:ed:1d:f9:1a:80:f4:70:80:a1:0c:7b:
fb:e9:8b:15:76:7c:a0:cb:32:aa:92:12:86:96:ce:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:54:08:F2:F8:E9:9B:E2:7B:76:4D:0F:7D:6D:AE:DA:4C:99:BF:DF
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:90:87:6e:b3:7d:80:37:fb:52:6e:e3:16:19:2c:a7:2f:14:
45:45:f0:a8:ed:13:c8:5c:93:40:c7:58:f2:62:7e:93:a0:f3:
cb:02:b1:9c:66:ef:19:5e:e7:f0:79:d3:74:86:f2:f1:db:9c:
ab:3b:3a:0c:60:a3:e1:ca:38:a9:12:c4:f1:58:44:19:a6:af:
63:89:c4:f7:a8:05:0d:1e:2d:1d:96:69:66:93:60:1f:1f:e9:
3d:67:27:8d:e9:d5:10:77:78:66:1b:ed:e2:d3:ad:86:50:2e:
ab:61:fb:da:c3:b7:6a:0c:e3:c8:02:02:a0:4b:15:f0:77:2e:
87:9c:b9:5c:9f:9d:2e:c0:be:0b:f7:9d:f6:af:d2:c9:00:e8:
9f:a0:5c:6f:6f:8b:9d:48:d9:05:54:97:a2:65:47:0b:21:48:
3a:df:fa:0f:5b:05:c3:fa:41:ce:3c:90:02:94:ca:c3:b2:29:
b4:d2:7b:a9:06:e5:bc:33:4e:df:05:85:54:c2:a8:fe:68:c3:
f8:33:a1:56:d7:9f:e0:43:8b:46:cd:28:7c:37:31:ec:45:51:
b2:7f:25:cf:ab:43:e2:1e:73:79:71:35:69:b8:5f:65:66:c3:
7f:aa:88:b8:19:e4:cc:91:7e:a7:54:f0:7d:87:55:67:21:df:
19:40:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:29 2025 by rpki-client