Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: DxgmDU1673LPrsgUc8YHOp4F9p6rehZp0aq0RDKPXlU=
Subject key identifier: D8:84:3C:3D:C1:C8:C9:2F:87:4C:B6:44:39:8B:C6:E1:74:2C:01:0B
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 0198D8BD15A99B2DD3390CFF1F44F2B81704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 10FA
Signing time: Sat 23 Aug 2025 21:02:07 +0000
Manifest this update: Sat 23 Aug 2025 21:02:07 +0000
Manifest next update: Sun 24 Aug 2025 21:02:07 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: +4sd30TaPCqavFLc6pyLP0+0k1plwK9dALOh0t6Dsus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:15:a9:9b:2d:d3:39:0c:ff:1f:44:f2:b8:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Aug 23 21:02:07 2025 GMT
Not After : Aug 24 21:02:07 2025 GMT
Subject: CN=d8843c3dc1c8c92f874cb644398bc6e1742c010b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:2e:15:c5:c8:0a:fd:dc:dd:92:f9:c1:c6:
23:6f:f4:c2:6f:5b:9d:63:05:88:07:84:f5:20:73:
99:6c:ac:50:60:47:e9:09:b1:a6:bc:c8:eb:23:a7:
43:ad:f8:d0:01:c2:2a:de:d8:55:8f:e9:c0:e2:88:
f5:6f:53:6f:6f:40:dd:a4:99:71:09:4b:09:ea:54:
7b:9e:46:c3:09:73:9b:ba:70:a4:dc:61:fc:c0:0b:
03:72:1d:8d:d2:93:7a:e3:e0:33:4f:e3:9d:69:6f:
d9:52:7c:35:4c:68:c1:68:24:ee:d1:57:2b:0f:e4:
ae:6b:38:de:e0:5f:2b:f9:ef:e9:15:fb:22:e4:9e:
5c:30:b9:dc:32:29:9f:62:29:0f:97:3b:27:79:64:
7b:67:1f:17:1e:c4:fa:dc:cf:46:db:0a:95:1b:2a:
6a:c4:7b:4e:7d:00:b8:fb:b1:4a:a3:49:f0:6e:23:
5a:55:41:36:4d:cc:e9:fb:b2:48:94:13:69:b3:c6:
fe:15:32:96:be:d4:96:a2:af:46:0a:23:45:73:29:
82:2e:6c:30:29:dd:c4:67:79:07:31:23:ac:66:5f:
d1:40:19:c0:f5:51:ec:bf:e8:ae:31:ab:5b:11:1e:
69:92:87:91:20:ab:2c:fb:a3:60:aa:03:8e:0b:3c:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:3C:3D:C1:C8:C9:2F:87:4C:B6:44:39:8B:C6:E1:74:2C:01:0B
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:79:e9:d2:82:34:1a:18:22:a5:5e:f9:92:5c:6d:78:eb:
cb:89:7b:a2:45:c7:e8:67:a8:5d:df:81:86:33:f5:fd:e2:69:
06:95:92:eb:07:0e:d8:ca:08:8b:39:84:0a:86:59:f2:3e:27:
8c:b4:2e:63:2e:65:59:39:db:d3:dc:76:8e:86:de:fe:27:a1:
97:6a:a8:74:0e:8c:d6:57:6d:c3:6e:56:dd:eb:af:7c:82:d4:
e3:4d:9c:36:80:c6:fa:d7:6f:5a:c6:67:01:68:d7:db:77:97:
0b:1f:92:d7:c1:13:3d:09:e1:b9:a5:66:7c:1c:06:21:ec:74:
8e:b6:8f:67:71:f6:29:3a:1d:b6:14:f2:8d:08:1e:30:0b:e6:
9e:89:ed:8c:20:ec:53:c8:c8:5c:81:ff:0f:c6:24:b8:9e:14:
6b:f9:a4:69:72:d2:60:17:60:df:90:c5:88:40:cb:9b:1a:e5:
33:76:9d:86:7b:eb:71:cf:8c:7c:e2:db:d7:76:2f:fd:3d:8c:
ee:31:b7:1d:2f:1e:b0:4b:a7:3d:6e:e3:80:4b:19:16:eb:13:
f2:88:34:3a:26:4c:b4:bd:c8:4f:ef:41:b2:f4:a9:1a:8e:ff:
6e:e9:16:11:4c:c6:06:d2:d6:dd:ed:de:22:e7:cc:00:d4:15:
8b:4a:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:28:26 2025 by rpki-client