Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: Rh9jMbKkdoWNZH1VxyDC6pDezI5eb+ZBHbsJ7W6vOgk=
Subject key identifier: A9:C6:D3:28:6C:A3:91:93:A8:44:B2:96:2B:1E:A6:9A:EE:61:89:F3
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 0198D65F8FEF9DCAE31CEEBD6D0E85F82CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 03C0
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: R98lp0dy8Eo7MO+lbUYLFNSzlfUrpEXHPmkvpg2+hNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8f:ef:9d:ca:e3:1c:ee:bd:6d:0e:85:f8:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=a9c6d3286ca39193a844b2962b1ea69aee6189f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:59:ad:6e:6c:05:52:00:f1:aa:06:6c:e2:
72:ef:9a:3c:82:b9:ce:00:bc:d7:35:03:05:28:cc:
d5:4f:c2:a9:44:b1:f9:6e:61:62:c4:36:01:43:22:
c5:b5:c0:f4:d8:69:5b:c3:39:b8:ba:fb:86:45:8b:
fc:87:65:b8:47:55:aa:77:3a:44:2b:88:c5:04:6e:
c4:e3:e1:58:68:40:1e:11:01:06:3d:69:4f:f1:df:
6f:37:13:49:c9:69:8b:38:9e:a0:e3:11:9a:23:2c:
73:ec:b5:1f:8b:fd:92:46:40:38:ce:43:cd:af:57:
29:10:be:39:bd:bf:c4:60:64:d2:14:49:45:57:c7:
84:ea:54:29:7b:e3:f4:a8:87:d7:00:9c:a4:36:6a:
ff:1a:af:b4:02:d9:b7:b9:3c:58:5e:2b:a2:43:87:
0e:de:7f:c2:42:1a:7d:c4:5b:a9:bf:5a:17:48:6b:
25:b2:df:1a:6a:e8:55:26:17:5c:bc:dd:2a:61:f5:
8c:2b:cf:ce:da:ce:6c:d4:ff:d9:6d:b3:77:a3:71:
40:24:5c:41:19:a7:dc:b6:28:54:9f:e3:04:f9:bd:
b4:2b:a1:7e:ff:9a:ff:f8:4f:35:20:9a:43:90:17:
03:80:aa:05:08:d9:b0:67:72:4b:01:81:95:ce:25:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:D3:28:6C:A3:91:93:A8:44:B2:96:2B:1E:A6:9A:EE:61:89:F3
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:99:21:dd:b5:b3:0b:7e:16:93:d9:ed:50:ca:68:bb:45:
03:f6:27:25:fb:9b:2b:19:31:ef:79:9f:26:94:0a:8f:a0:4f:
21:34:81:8f:62:f3:7e:c4:d7:16:6f:44:0f:6c:87:df:bf:6f:
63:6d:5a:2e:01:b6:18:0e:b8:f6:62:71:b9:1c:58:62:a4:b7:
a5:70:61:09:74:c9:db:f5:7f:14:06:de:87:d6:74:c4:15:d2:
80:62:91:14:4e:d7:29:64:06:d9:d2:bd:e9:1a:85:29:0b:1a:
24:50:07:f4:43:0c:b9:9b:65:84:be:9a:cc:11:24:03:5f:20:
bd:19:6a:40:f6:06:8f:11:1d:33:c2:12:52:d9:f1:61:37:57:
a3:68:d5:5a:68:60:da:8b:97:60:8f:1d:87:d9:25:79:c4:05:
df:9f:f6:c7:6f:53:b7:e1:1a:d1:28:db:97:b8:95:85:36:da:
d7:0d:86:04:1e:64:bb:0e:a3:0b:c3:9e:15:a4:60:a4:e1:fb:
e1:83:bf:7e:0e:b2:3b:52:9b:fe:1d:1f:3f:6b:58:89:b6:bd:
8d:fa:f4:d5:3d:5d:94:15:8d:88:80:7d:9c:bc:61:35:d1:e4:
db:bf:c6:aa:b9:c4:df:cf:ce:05:7d:b6:6c:36:2c:e9:49:34:
05:b5:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:50 2025 by rpki-client