
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: zAMixXSkBKk9vIGFdm4s3n5Bt4RIq95BUN5GdBgIuuE=
Subject key identifier: 34:BA:81:99:35:B3:3D:28:72:13:40:02:6A:E7:FB:35:9C:EE:CC:EE
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 0198D6613B707AFD71A794BE8002CA04EC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 0EB1
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: 1KQINiWcHXPmXrJBuGLRNHZZULYr3/fR6swZfllLXI8=)
2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3b:70:7a:fd:71:a7:94:be:80:02:ca:04:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=34ba819935b33d28721340026ae7fb359ceeccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:75:eb:3a:6a:73:29:be:90:c2:6d:fb:e8:be:
b6:d7:38:b8:78:a7:37:e7:f8:3a:a7:3a:9d:4e:a0:
3f:63:90:fd:78:55:05:c7:04:1f:06:69:6e:7b:2b:
c1:b9:85:9e:21:af:3b:f8:d2:07:d0:c5:61:a0:5f:
03:e5:0f:ca:98:4f:dc:39:88:e1:ab:56:84:9c:2d:
f3:21:1e:fa:12:58:8b:11:fa:f7:0d:7a:b1:e9:35:
01:e6:56:c3:cc:c0:c0:29:21:75:bc:3c:d0:a5:7a:
5e:1c:cd:ba:ef:38:36:c8:aa:35:50:e5:9c:86:0c:
ef:6a:bb:7e:5b:63:4e:16:1d:86:6d:b6:42:55:42:
8e:dc:d2:43:4f:ee:7b:3e:d7:9c:0f:70:55:4f:88:
17:bc:16:46:d4:bd:a9:c9:34:bf:9e:87:36:13:1b:
ea:4c:9e:12:5a:fb:19:aa:08:77:9e:fe:df:23:8b:
aa:b9:42:dd:80:39:ea:c9:34:e2:68:30:71:cd:c4:
68:51:45:b6:80:99:3e:70:3e:d9:b4:ce:aa:20:a7:
f9:bb:d3:77:b0:7f:3c:33:c6:b1:15:fb:c8:aa:f5:
de:5a:95:53:50:94:e7:e4:08:64:2c:05:4e:90:c4:
40:7c:2a:7d:6e:10:31:a5:a7:09:d4:9a:ab:60:10:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:81:99:35:B3:3D:28:72:13:40:02:6A:E7:FB:35:9C:EE:CC:EE
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:65:a3:f3:fd:dc:ed:fe:8e:10:72:7d:d8:c8:90:c3:51:
94:3e:c9:a5:6e:09:b5:38:87:35:cf:10:ad:43:5c:73:75:34:
f4:10:9e:48:9a:1e:48:ec:f7:5c:08:75:2f:e6:0a:0a:0d:71:
ae:0e:50:1d:99:ba:54:9a:16:35:de:e6:28:64:6b:b2:76:18:
ba:23:fb:95:e9:3a:d4:bb:ea:7c:ee:fd:86:9d:0f:e3:a1:fc:
ee:50:34:0e:43:ab:32:cb:6c:80:d3:96:98:a3:54:17:3c:53:
1d:ea:46:fd:dd:ae:b8:5d:00:df:2c:db:9b:ff:cf:fd:c4:eb:
94:a3:d6:2a:65:c6:e1:d5:82:63:d7:87:6a:4c:6c:77:cb:c5:
47:6f:07:22:b1:2c:d4:34:7a:eb:36:03:87:96:71:52:50:1a:
9d:c4:0f:f6:49:b9:c2:48:1d:fc:83:31:1b:e5:ee:c8:8f:f4:
e7:98:62:9d:be:e7:06:48:7c:62:b8:77:18:8f:53:98:56:b0:
5f:b8:89:7b:59:98:c2:e9:9d:9f:fd:e4:75:94:12:2e:b1:f5:
6e:4f:76:45:4c:85:90:ec:db:ad:48:e7:eb:19:79:4c:5c:c5:
e9:7f:26:f2:c3:fa:ec:98:83:1c:e8:c6:87:db:5b:b9:e3:ce:
28:2b:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:26 2025 by rpki-client