Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: AYA1IrQpmc/kMm81HZTD9dDdMxZdaxjujYM2R3M37Qk=
Subject key identifier: A8:68:D4:35:53:E6:91:9B:AE:D7:0C:7D:89:C6:A2:71:D2:CC:45:AE
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 0198D6607DE4AD8A8D7CF73CDA8FD3AD3D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0CE2
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: KNGlo+Pg9eRFdfqlj1m5U+PR7ZKJszveJ/21CUAzfkw=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7d:e4:ad:8a:8d:7c:f7:3c:da:8f:d3:ad:3d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=a868d43553e6919baed70c7d89c6a271d2cc45ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:d7:f2:85:32:ef:51:c3:7c:f0:2f:ef:1d:
82:32:41:bf:f5:69:82:ad:70:25:32:cb:25:a8:ab:
43:1f:01:65:e7:1b:ce:10:2b:c7:b0:37:46:48:87:
49:b1:1c:cc:69:c6:b7:c2:4a:52:eb:5d:3e:d2:e9:
e2:53:65:02:8b:f3:fa:51:7f:9d:00:f4:cd:82:37:
cd:cb:03:36:60:1d:d8:ca:27:b3:4a:ec:0b:03:68:
f2:79:ab:7a:a7:3c:8f:1d:6f:1a:3b:43:8e:16:0b:
d7:d1:81:22:70:66:62:c8:d6:e4:34:91:e0:df:39:
89:45:a5:05:71:0f:48:32:c5:27:88:22:ee:09:1c:
f8:cb:96:51:2b:90:70:39:8a:d8:45:6b:4b:32:25:
b4:94:d7:4e:04:1f:64:20:bb:86:f6:14:f3:59:55:
41:ff:d9:84:f0:73:ee:00:01:62:7b:5a:a3:b1:e3:
2d:9e:1c:fb:fd:c6:de:51:2b:28:96:86:af:84:51:
cf:e2:fe:0f:f2:f2:a1:68:da:18:f1:34:4f:fd:33:
e3:b0:9e:94:1c:ff:1d:86:04:18:ca:9b:3f:ee:9f:
e1:55:cf:26:7d:72:86:69:95:7a:27:67:cd:22:f4:
f5:73:f8:35:c0:c4:29:77:91:a3:2a:51:45:ef:fa:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:D4:35:53:E6:91:9B:AE:D7:0C:7D:89:C6:A2:71:D2:CC:45:AE
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:cd:a1:15:dd:fb:3b:8f:49:9f:c7:b3:63:40:f9:eb:d6:
3e:8e:96:7c:26:bf:0e:a4:e8:9d:a8:c9:fc:ca:d1:0f:15:67:
88:8e:b2:d3:97:91:81:e7:1e:9e:be:c3:81:26:42:40:02:d9:
5e:b4:19:ac:b2:ab:89:d7:03:e1:95:5b:11:74:5d:05:f5:46:
5c:f2:ae:ed:ea:53:89:69:78:dd:d1:b8:50:1b:bb:9b:6b:a2:
ed:22:06:bc:17:8e:2c:eb:4d:bc:71:2e:db:c9:8e:26:c1:45:
4e:b7:93:37:7b:8a:00:c5:36:cc:34:e8:06:c5:57:13:60:8a:
11:97:25:43:00:0e:b0:97:1e:8c:64:e1:e0:22:c9:0a:4a:a1:
3f:e2:49:cc:7f:37:40:01:fa:d2:27:53:e1:b4:b3:ff:78:22:
9e:69:f8:90:da:94:bb:a7:a9:f8:37:c6:d7:ff:df:f3:fd:33:
2d:ad:51:2d:eb:1e:94:2b:ec:8a:64:08:37:2b:1d:e9:8b:34:
46:58:75:70:72:46:49:64:d6:e0:3b:15:7c:86:34:42:70:c3:
ce:69:17:34:77:9c:7f:3c:9e:87:1d:01:28:82:99:74:64:2a:
ea:1e:80:16:21:08:6b:25:a8:32:4e:70:61:19:c3:db:5a:02:
29:cb:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:07 2025 by rpki-client