Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: 27D/x4IfVI8eYbrtvhAyn8v6B3BVt0IbOQZO8TEnXV0=
Subject key identifier: 3B:AE:9B:64:E1:13:9C:B5:B7:EA:63:E3:BA:7E:88:27:FD:6F:04:A7
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0198D705F737F14BFEB79A1247175614CD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 1200
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: R0G7++Qa5FSToYSdaI2XEHygQgrS6AzEzJs7O7USubc=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f7:37:f1:4b:fe:b7:9a:12:47:17:56:14:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=3bae9b64e1139cb5b7ea63e3ba7e8827fd6f04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:31:06:4d:a5:ef:52:dd:0e:fc:d1:da:ce:
9a:97:3a:e6:f4:58:4b:68:f2:18:12:a6:5b:ac:f5:
61:47:f0:97:98:27:f0:17:bf:59:47:56:58:df:7d:
c9:3b:aa:0b:3c:a3:81:79:e0:28:27:48:68:ae:f7:
13:ea:fc:73:a3:7a:7f:7c:a7:5a:c8:8b:9d:c2:ed:
73:a0:8c:cb:20:80:98:c5:46:c7:75:65:54:1a:38:
2e:64:6d:84:ef:35:32:10:db:f5:03:57:1f:1c:fa:
d6:f0:66:79:4b:21:d0:f3:f9:32:7f:43:a7:e2:3e:
3d:b6:a9:aa:01:f9:88:d4:42:dd:42:50:7e:61:92:
5a:90:96:bb:68:8d:c4:56:aa:fa:00:cd:32:25:e9:
6b:53:c3:72:44:2a:31:28:5d:0d:c3:13:5d:d4:01:
5d:71:84:99:99:c3:8e:79:20:e4:b1:75:c3:2e:d8:
39:42:7a:89:4d:32:ee:aa:33:c6:ef:7a:f2:0c:b4:
ef:c6:a8:0d:f9:a6:42:1e:1a:ee:1b:df:89:5e:df:
3a:03:e5:b3:e1:30:da:74:49:37:d7:39:4c:62:87:
ae:9b:c6:fa:61:d1:49:0c:ce:a6:4a:90:54:4b:72:
98:d1:5c:30:48:bb:76:b4:b3:72:26:bb:5d:e2:76:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:9B:64:E1:13:9C:B5:B7:EA:63:E3:BA:7E:88:27:FD:6F:04:A7
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:75:f4:14:b5:d0:fd:d5:19:12:69:6f:f7:61:19:84:32:8c:
f0:fa:da:84:1a:ca:9c:17:81:47:a1:d3:3f:55:53:01:5c:b5:
50:0b:3d:d5:10:42:1d:a7:ab:68:19:6a:27:6c:4d:dd:ea:5b:
c1:93:a6:fb:80:49:a9:be:6e:09:c3:0c:71:14:db:43:6b:d6:
ea:da:07:8d:a7:a4:0a:1a:29:85:93:ee:41:07:8d:bc:14:d0:
81:1c:a6:47:bc:3a:1c:9a:29:09:98:70:79:bd:b8:e8:53:f5:
5f:3b:5b:00:b2:fa:73:13:17:5a:e3:6e:48:6c:7f:2b:26:9b:
04:63:bd:d0:90:c4:b0:37:94:eb:6c:5c:2e:30:6c:5d:48:2e:
8c:34:76:2e:d8:dc:58:26:f2:89:a4:ef:40:de:f3:3c:b3:a0:
9a:c5:9a:94:7f:2b:a4:14:d4:12:ae:55:60:38:d5:19:07:01:
26:b2:3c:fe:27:a5:87:3d:66:0d:65:36:c1:19:42:bf:0d:76:
ec:9e:6a:b6:51:1d:c5:be:a1:e0:c1:6a:e0:6c:86:95:ba:18:
61:0f:ab:a2:7d:93:1c:38:65:a1:02:30:8b:e0:b0:3d:eb:86:
97:03:9d:e6:d8:8d:3f:d9:de:8c:88:0a:d7:48:23:e4:46:e8:
e8:03:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:01 2025 by rpki-client