Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: 6iKzN01E/O0Ic74HZUJOkv2cutw5IRMjdlSnfDbxjKo=
Subject key identifier: D8:77:9A:DC:18:7A:68:57:FA:24:E1:AA:96:09:05:60:1F:25:FE:B3
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 0198D4A7F685E0B8B165853FDFF7B3DCCA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 01A9
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=)
2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: OQFdP4+mOwagRhnv01bttm2SLnfpqiv9wXO2BV0OJZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f6:85:e0:b8:b1:65:85:3f:df:f7:b3:dc:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=d8779adc187a6857fa24e1aa960905601f25feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:98:fe:53:18:f6:8d:ec:ce:b0:c6:af:bb:
d7:df:53:cf:63:c2:46:7a:3a:d6:3b:4b:f9:4f:a3:
33:5f:23:55:2b:fb:bc:d0:cd:42:f8:fc:40:37:09:
f9:6c:f9:67:fe:04:33:c5:15:f0:ab:28:9d:5f:a3:
0b:a9:ca:50:fd:6d:a7:90:3d:63:44:37:d1:9b:08:
fc:b3:61:29:9a:c5:6a:76:21:51:72:03:0e:14:94:
32:05:46:96:99:3a:79:f9:54:d5:07:fa:11:b3:9b:
72:3c:45:e9:1e:74:b1:5f:a9:15:2b:55:b0:3a:eb:
d8:77:a6:bf:41:2c:a1:bc:49:18:9c:db:ab:5d:28:
06:fc:93:e9:51:23:07:db:b3:a3:4d:e6:8b:e7:4f:
01:79:0f:37:d2:8c:e5:e4:db:88:ed:97:ae:81:ca:
ec:c8:62:92:22:13:20:f6:60:89:26:94:db:f9:69:
3d:bb:66:52:36:9e:70:91:5f:86:45:0a:c7:ec:3d:
0f:1f:33:52:49:75:e0:eb:e6:58:28:af:d8:0a:80:
7a:f6:b9:2a:84:ea:92:f0:9d:cc:cc:03:f8:63:2d:
50:18:ac:e4:71:b2:9a:17:b0:43:9c:2a:e8:71:21:
8b:9a:25:6a:64:09:d1:59:ad:26:90:b8:65:2c:f1:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:9A:DC:18:7A:68:57:FA:24:E1:AA:96:09:05:60:1F:25:FE:B3
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:aa:45:99:7d:2c:41:cc:25:ea:6b:ce:dc:52:07:be:a1:
61:17:cc:c3:73:f8:1e:4d:2e:29:6c:0f:c8:b8:20:05:ba:de:
3a:84:b8:6c:27:eb:b5:1c:15:43:44:c8:e9:af:0d:1e:94:d5:
46:bf:45:59:64:a5:6c:61:94:be:d8:47:fb:72:46:7b:e3:26:
2a:63:f3:f7:97:50:a3:56:ae:2f:90:f9:ed:a4:90:d3:26:e5:
3b:15:0d:03:74:56:c3:98:f9:b4:5e:aa:e0:0d:a6:91:e1:81:
37:eb:b0:7d:13:61:ab:60:e1:95:97:dc:05:aa:19:50:80:4a:
83:77:c0:1e:1d:d6:3f:75:80:0b:f8:21:a8:52:80:02:8f:15:
4d:27:5f:57:44:aa:3b:22:69:7d:b9:21:45:17:29:da:79:fc:
2a:d9:7e:8c:00:74:b2:39:ab:3b:82:09:04:35:a9:7e:a7:bd:
32:b6:62:e8:f8:c5:14:eb:9e:3d:4e:1f:2c:cf:1b:85:04:17:
8d:48:1f:80:bf:91:0e:9c:82:17:58:6f:6c:50:3c:4f:9e:f1:
59:a7:c2:7b:e1:6c:73:8a:5d:2d:cf:5a:a1:18:d5:72:37:cd:
1f:08:3f:a2:3e:88:89:b8:d1:2b:22:4d:6c:cb:a5:56:b3:de:
bd:e4:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:27 2025 by rpki-client