Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: a/RErnobDOtzsuaoljfyYe4gV05H99WCnqEiIV5N6ak=
Subject key identifier: 8F:F4:6E:C3:7D:C9:02:20:9A:5B:96:B2:62:D4:79:D4:1B:63:1F:03
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 0198D5838DACE6C2BDF54F1D7739C9BAA451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 146C
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: VdQJbmcuXPDf+f/HbgRwQg9XUijmPMTdm2r+Ako4I6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:ac:e6:c2:bd:f5:4f:1d:77:39:c9:ba:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=8ff46ec37dc902209a5b96b262d479d41b631f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:d9:6f:07:2e:a4:ab:20:6d:f8:c7:1b:ad:
41:c8:e3:1e:ff:49:61:2c:6d:56:a0:9b:75:27:e1:
11:10:7f:8f:4a:63:9c:68:6b:51:e6:a0:6a:60:91:
0b:43:3a:14:28:98:f5:b9:91:fb:13:64:2c:43:b2:
d4:db:24:67:e6:4a:5d:ec:16:55:26:ab:6c:44:af:
2a:41:7f:d3:b0:bd:a3:de:20:ae:b6:76:6f:15:af:
fe:e7:d8:02:98:7b:6b:72:14:4b:ae:76:7b:d7:b3:
52:4c:dc:82:cc:3c:3d:0c:b1:5a:34:9a:a6:19:ed:
3d:3b:8e:52:7d:ee:51:d3:29:db:da:d6:e4:51:7d:
de:38:e9:5e:26:4c:e8:fa:31:7f:97:75:89:ac:07:
ea:46:89:c7:c7:2a:78:fa:fa:7c:0c:8b:60:cb:c5:
72:2f:00:02:74:ab:d3:d7:95:79:1b:88:8f:cc:6e:
2c:09:27:80:90:d4:0b:d4:85:40:c8:67:2c:b9:b1:
ad:f9:bc:ae:55:5a:02:b4:29:18:ee:77:33:96:f2:
62:d6:35:ce:df:c5:31:5e:0d:d2:3a:34:b4:91:ef:
81:94:95:f0:ef:93:08:de:f2:c2:42:52:a0:c2:43:
ee:08:9e:25:d6:5e:72:76:d5:17:be:3c:50:3a:1e:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:6E:C3:7D:C9:02:20:9A:5B:96:B2:62:D4:79:D4:1B:63:1F:03
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:b1:4d:f6:ee:e4:fb:01:41:91:62:b6:ef:46:2e:2d:14:
81:7c:3e:64:3b:d8:09:15:b1:cf:d0:62:f0:ac:0e:a0:c2:8c:
6a:8e:7a:dd:ec:df:5e:b5:1c:d0:46:9f:c3:77:e1:56:db:82:
4e:c9:80:e8:f0:0f:4e:0c:35:a6:98:df:1a:9a:18:45:71:82:
00:bc:38:b4:af:6c:0c:87:b4:b7:93:2e:1c:7a:3c:96:19:51:
b9:f5:fe:23:cb:90:c0:e4:cc:f4:59:f3:0b:c3:e7:e8:6d:57:
a2:14:5b:92:73:5c:bb:b1:48:5a:04:56:f2:29:99:15:e2:49:
2e:79:77:28:01:d3:28:82:f9:d2:f4:a8:0e:0d:62:61:3b:45:
37:2b:a7:5a:c6:be:98:75:79:f1:a7:83:7a:d7:11:ea:ce:9e:
3f:5f:6f:fc:6d:70:6b:e9:81:8e:1b:de:62:bb:fa:be:9a:ba:
3a:fa:e2:20:fd:fd:eb:07:03:3a:f9:97:ec:9e:1a:13:30:6c:
f0:14:a8:82:79:3e:70:bd:01:e7:64:67:f7:c8:0f:1f:52:a5:
be:39:d2:7b:ee:fc:62:bd:43:e9:d1:4c:46:43:cf:ff:b9:7e:
a7:5a:01:c6:06:c2:58:88:2a:f2:fc:2d:74:cf:f4:10:0c:38:
cd:aa:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:46 2025 by rpki-client