Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: qj2gntDoA12xJ9JF6rJq/aAI86Jc63ASzFbkf5Oz1FA=
Subject key identifier: 6B:1D:5A:31:12:37:28:CB:D3:A9:9F:DD:6B:F8:8E:C5:96:03:08:03
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0198D583C0F4B047D2EF081F1185C72FCA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: T7ZPIY6tWbJc+HzHOxzsHNLOdEFesoqnshJ71Mfw6C0=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c0:f4:b0:47:d2:ef:08:1f:11:85:c7:2f:ca:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=6b1d5a31123728cbd3a99fdd6bf88ec596030803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:29:15:32:91:29:2d:25:b1:d1:f0:f3:28:
73:cf:53:c4:c3:2c:da:12:43:21:06:9b:0e:77:55:
ce:a3:d0:e0:b3:42:6a:92:93:03:a2:01:a6:0c:b6:
3a:b8:f2:19:42:e9:53:42:97:b7:9e:a0:4b:df:32:
da:ce:13:4b:b2:11:02:fa:a6:06:6c:19:38:3d:c1:
79:83:21:05:ca:38:3c:ae:54:e7:75:4f:5f:80:cd:
e6:d6:b2:a6:83:18:b2:7c:d5:42:8b:26:85:0b:82:
72:ba:b7:96:59:57:dd:a3:f0:3f:cf:93:ce:80:e1:
3d:5a:aa:37:b3:72:99:15:a1:7b:c1:d5:b9:6b:59:
57:51:c6:d5:a5:d2:bc:82:c5:68:40:84:e3:e1:fc:
34:bb:95:6e:76:87:11:c5:b1:c2:f8:8c:6b:a6:55:
8e:60:2c:fb:28:3b:d2:71:f3:06:bb:39:52:01:a0:
0b:d5:d8:e7:1e:a0:48:0e:d6:ee:f2:81:22:01:26:
b5:d8:05:28:ab:24:35:c8:72:e8:b7:87:49:98:e0:
84:26:37:b8:11:d3:09:71:3d:09:ee:fa:60:82:d1:
0a:f2:84:fd:4c:b7:4c:9c:95:8b:d0:d7:de:12:73:
60:fc:0a:ea:a5:ff:45:80:b5:15:b4:1c:eb:80:ee:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:5A:31:12:37:28:CB:D3:A9:9F:DD:6B:F8:8E:C5:96:03:08:03
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:68:3b:d4:da:4b:a2:fa:db:d2:dc:73:69:cc:85:c2:a9:
81:40:01:08:02:11:c3:45:90:ce:fd:3a:55:f7:de:93:63:67:
b0:d8:ab:24:9a:15:da:8c:41:ad:52:7b:30:58:57:70:e9:b4:
30:74:13:c6:55:b6:f4:f7:9e:5e:88:23:79:27:79:2c:6d:ca:
5a:6b:da:a1:87:0f:29:94:45:3a:70:96:b7:ed:11:69:41:a5:
24:ad:12:c4:22:71:a4:74:1c:fd:c7:c2:a9:0a:48:a8:31:8f:
f7:dd:f8:99:cd:fa:55:b8:d6:b7:75:c3:af:71:78:d4:2b:74:
61:4e:ca:6e:9a:99:d3:47:e5:d0:3f:bc:84:cd:bc:ba:59:1c:
87:51:88:54:58:07:8d:df:21:bb:c7:a4:14:e3:ff:9c:db:1b:
34:a9:cf:2e:23:1e:9e:33:00:d0:f0:ac:e1:e3:7b:40:47:e4:
9d:47:71:f5:fb:e4:ae:d9:70:a2:45:82:7a:98:4f:86:58:fd:
09:50:62:59:a6:91:39:a3:eb:e2:ab:60:8b:51:d0:1b:a9:66:
64:4f:f4:95:15:cb:ce:ec:ce:d3:8e:f4:b0:f5:aa:32:41:68:
46:6e:3d:fa:30:be:1b:8a:b1:8e:52:08:17:fe:52:8a:0e:ab:
92:a1:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:45 2025 by rpki-client