Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: Rwqnnn0KCm1mRwDd6GAx6gC9TLERDmiBOa9V+o6veG0=
Subject key identifier: 27:B0:34:61:CA:5F:AF:69:B9:71:CE:AF:A7:EE:EC:A5:9D:60:AF:62
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 0198D73BDAF280A5311F73D0F97C900C0655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0F73
Signing time: Sat 23 Aug 2025 14:01:20 +0000
Manifest this update: Sat 23 Aug 2025 14:01:20 +0000
Manifest next update: Sun 24 Aug 2025 14:01:20 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: NCuhs5FTN5wQSpqKp+ftmhoIAilStQ5flPS73tTLPPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:da:f2:80:a5:31:1f:73:d0:f9:7c:90:0c:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Aug 23 14:01:20 2025 GMT
Not After : Aug 24 14:01:20 2025 GMT
Subject: CN=27b03461ca5faf69b971ceafa7eeeca59d60af62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:5f:da:46:96:24:9f:9e:5f:30:95:c3:f2:
3b:c9:5d:cf:28:3e:91:97:a4:9b:39:25:cc:aa:f8:
e0:37:1a:20:a5:15:ef:c3:21:f2:b8:4f:80:77:9a:
c1:ed:a9:b0:60:08:39:07:ae:87:a9:3f:92:16:df:
a8:13:d2:73:3e:00:b4:3e:e8:ac:08:a9:0b:60:cb:
7b:70:84:a1:72:d2:b4:0c:da:1c:41:86:d3:11:b1:
0e:1d:91:0b:ba:f7:81:4a:1e:d9:43:b1:80:05:4f:
b5:dd:0b:fc:87:c5:a9:e0:0c:06:4f:a1:5d:dd:2f:
51:1b:30:36:2a:cb:72:20:9c:12:9f:88:36:81:2d:
7a:75:99:a6:75:33:a4:07:70:0a:cc:0c:ce:63:1a:
83:2b:35:bc:03:a6:12:7c:c4:73:51:17:3d:71:63:
6f:8b:93:ea:75:d1:ff:f8:29:ad:a0:52:35:d5:53:
5b:e0:99:73:17:0b:b9:db:60:0c:4f:01:03:69:52:
01:93:03:65:7d:28:9d:41:96:f3:ee:2f:8f:c3:00:
ce:b8:3d:98:d6:0b:c9:77:d4:01:ae:48:5c:69:b5:
67:9a:22:64:02:93:30:43:0c:a0:fe:fc:98:ea:6f:
5b:b4:d5:b5:21:8f:3a:ae:1a:95:be:bd:b0:8d:a7:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:34:61:CA:5F:AF:69:B9:71:CE:AF:A7:EE:EC:A5:9D:60:AF:62
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:f4:83:16:2b:82:8a:e0:28:cb:83:bc:79:a9:25:dc:7e:
2e:6f:e1:df:c0:77:58:e5:0d:48:70:e7:59:fc:e9:19:e0:89:
86:60:6e:7d:ca:43:ed:bf:fc:8f:e5:09:c6:68:41:93:b0:46:
d6:eb:ed:81:de:86:0c:b7:25:98:cc:a1:15:dd:d1:42:85:d1:
19:be:ea:15:14:fa:39:0d:c1:a2:33:c4:b4:73:f0:24:6e:cc:
c0:d6:98:75:98:76:4f:a1:66:ff:b5:4d:89:27:28:40:8e:ca:
9a:b9:cb:a7:6f:86:75:c1:44:bd:04:f6:c8:3b:d2:5e:c8:23:
ed:a5:ca:c7:ca:98:2b:54:cb:18:5a:9d:9a:d0:6e:4c:38:e6:
eb:95:87:e1:6f:7b:83:c5:78:aa:52:b0:2d:f8:6d:34:65:00:
9f:3f:fa:c6:d8:26:08:8d:73:f0:16:92:b4:bb:7b:c1:8f:e3:
3c:1a:c8:4e:e6:6d:2c:71:29:1b:36:ba:63:23:79:c0:38:ef:
d0:f3:e9:71:96:47:11:5d:dd:e9:33:38:4e:3d:01:5d:20:34:
8a:db:fa:02:fc:00:50:74:67:0f:c3:1b:72:ba:0f:06:76:ed:
d7:8d:9d:bd:83:d5:74:ee:81:4e:6d:28:a7:af:a8:2c:7c:24:
60:33:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:40 2025 by rpki-client