Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: jyWQAMdKxbZQy5UPlnJTg1VBZ5RK0ZInL2SxYu5Q3dA=
Subject key identifier: D4:86:1D:AA:AF:BB:B2:EF:C6:F1:90:D1:99:75:F4:77:89:86:87:52
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 0198D54E38900BC00926586A6704B4E58CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: ujlO0M/BBgGSHdC/Mt9R1t4LUffdjweNQxT3JkT9ryA=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:38:90:0b:c0:09:26:58:6a:67:04:b4:e5:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=d4861daaafbbb2efc6f190d19975f47789868752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:ee:ae:69:44:65:32:dc:d6:93:35:40:01:
44:cb:b4:6c:9b:f4:18:fe:b0:06:32:4f:0d:4b:e8:
03:17:64:fa:d1:c4:b6:ce:fd:6b:ce:03:1b:a7:f7:
45:bc:f2:44:77:ed:73:f0:c5:b5:33:ae:ee:e4:db:
3c:7f:73:16:1f:a7:40:4c:a4:3a:14:db:ce:c8:0e:
7b:97:02:95:f9:7a:9e:51:4b:fc:0d:7d:95:44:2c:
eb:5e:5e:77:5a:88:8a:6c:45:6e:5b:0f:67:38:a2:
3e:ec:64:32:6b:65:11:94:1c:25:40:ad:13:31:78:
25:cd:61:b6:c5:4b:64:4e:71:4d:92:d3:00:e3:c0:
0e:7b:96:99:a2:75:1d:cc:eb:25:b5:08:9a:c0:62:
6e:bb:85:8b:e5:e6:81:f0:b2:5f:e0:2e:1f:92:0b:
75:dc:4a:15:96:e7:c0:f0:3d:62:9a:43:a2:2d:82:
a6:ae:1c:67:58:e2:b8:4b:e5:90:19:cf:c7:e7:b3:
20:b7:a0:d0:56:1b:47:0c:6c:b6:bb:6e:ee:e4:71:
8c:23:46:9c:80:a2:c5:6b:23:92:3d:90:6f:ab:af:
70:b3:be:7c:42:e4:76:bf:63:ce:9a:8c:bb:f9:1b:
25:2f:21:b4:26:59:e5:bd:b3:19:14:77:fc:8e:26:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:1D:AA:AF:BB:B2:EF:C6:F1:90:D1:99:75:F4:77:89:86:87:52
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:f6:20:02:ea:7b:ff:bd:b5:d4:36:0e:7b:4e:69:dd:83:
f0:2f:a0:e8:6f:70:19:5e:0b:71:62:80:7a:6b:ce:c1:68:27:
6f:af:a1:b9:39:72:7f:98:b1:cf:88:b3:86:bb:ee:4a:d7:c1:
80:26:ac:7f:19:bb:a0:2a:e5:a2:9b:aa:8e:1c:1e:2c:c4:0c:
03:44:fe:42:cc:e4:48:ad:f7:21:43:a1:37:c7:36:05:8c:c1:
61:18:37:2c:c3:64:4e:81:8e:5f:60:c5:84:64:39:5b:f9:fa:
35:a9:84:dc:fd:97:28:66:fa:13:d5:df:e2:a9:09:4f:bf:ea:
02:db:ff:02:76:67:a4:d0:7b:33:19:2d:06:cc:c4:75:52:69:
da:d7:73:74:1b:02:0a:08:6c:28:93:50:94:5d:4e:f4:d1:7c:
d6:4b:ac:fb:81:65:14:b6:e6:40:2b:44:d1:b6:bd:83:80:df:
2d:95:b3:35:c2:3c:d8:e5:2d:fa:fd:63:72:6b:bd:79:5e:81:
68:b4:85:40:55:31:6b:8e:f1:c6:f6:20:12:72:ed:2e:65:e2:
fd:ad:90:f7:eb:4c:be:e7:9f:e5:18:37:9c:fd:2e:cc:96:3a:
dd:28:d7:7b:7c:a2:c4:00:9b:b6:53:1e:e3:4e:a0:e5:80:a0:
e8:60:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:30 2025 by rpki-client