Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: pHLian5gVdsvDG5L97XBWTwEFqUCwV/bxUu97/jXPhs=
Subject key identifier: F7:45:99:46:21:48:8C:34:E8:B9:63:82:06:B5:FE:F2:AF:CA:FF:10
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 0198D6988933FEF39DA3E5D230A8DB2B7F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1528
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: gAlIRMG6hnCUKBN9dIUojbNOHBOsYNKGk95fsjKXd3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:89:33:fe:f3:9d:a3:e5:d2:30:a8:db:2b:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=f745994621488c34e8b9638206b5fef2afcaff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:d4:c9:6a:f7:3c:cd:66:94:1f:45:a3:0d:
13:95:9e:03:98:11:b9:50:bc:52:ee:21:1a:fb:82:
3d:2e:3a:eb:4c:cd:af:d4:9e:a2:52:1a:5c:0b:2f:
45:4d:44:d3:50:a3:c7:78:41:eb:ff:d1:3b:ba:0b:
f5:25:78:f2:3e:67:76:ed:30:98:c8:13:36:9c:65:
87:25:94:c4:c5:57:ed:0a:dd:4a:4a:92:6a:94:ab:
88:0e:53:87:f8:b9:4f:1a:9b:d5:05:7e:21:41:37:
3e:34:f9:f9:7a:80:95:08:2d:39:1e:1b:3d:34:e3:
ac:fb:dc:46:e1:48:9d:3c:d4:53:51:a5:34:51:ba:
77:2b:41:0c:dc:48:8e:3d:8c:e2:33:78:c8:04:58:
e7:61:5c:d7:9c:7f:26:da:5d:d4:3b:ae:ed:fa:b0:
ba:eb:6c:e5:43:2f:c1:39:19:c2:f2:66:51:4a:03:
9c:72:e4:fb:9a:d6:5b:be:27:03:e5:ed:73:32:df:
56:b5:51:c4:fa:09:3f:07:cb:1d:72:82:49:88:37:
4e:c6:d5:72:4d:97:e2:81:38:04:4c:f1:32:69:6c:
e1:b4:d4:5c:fb:7a:91:fd:01:13:29:81:65:4b:2e:
41:54:dd:25:b8:a5:11:28:95:3c:2e:c2:7d:52:98:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:99:46:21:48:8C:34:E8:B9:63:82:06:B5:FE:F2:AF:CA:FF:10
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:49:20:df:a6:38:98:b2:ec:1d:8c:79:5d:ac:bd:9c:3f:
26:52:e2:81:4e:8e:f7:d2:8f:35:6d:c2:77:12:4f:28:95:bc:
b6:71:32:42:3a:92:e5:00:5e:ff:ac:28:ad:30:25:01:9f:60:
1c:dd:68:70:f2:f9:ba:da:68:14:d1:e6:f0:bf:b2:96:00:f6:
8f:bc:fe:af:67:f5:5e:ad:71:d3:0f:12:f6:4a:02:6a:9a:51:
fc:e7:a5:70:87:70:bf:fa:ef:3c:51:76:88:14:da:9b:12:26:
65:ce:72:1c:8a:f8:78:2f:bf:90:55:26:0d:86:a1:de:f8:0c:
06:1d:76:f9:70:5a:f2:5a:bb:d9:42:55:f3:73:31:49:40:ff:
e2:a8:d9:de:98:3a:c9:a5:a3:12:8d:7f:5c:4c:59:54:7e:17:
6a:55:6d:ec:9d:ef:25:34:fb:52:85:1e:99:58:8f:95:54:81:
23:1d:15:d0:59:51:09:8a:d2:a5:d4:9a:cf:47:b4:77:03:7e:
c8:63:a3:ac:5b:52:7d:5b:b1:72:39:94:68:cb:fa:44:74:e7:
fe:1e:df:da:fc:90:ed:c3:f0:b7:62:9c:fb:ee:80:81:1c:02:
02:c8:cf:46:48:92:2d:75:1c:85:1c:5a:51:65:d3:78:45:bc:
2d:ca:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:33 2025 by rpki-client