Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: fj21HJ3/cqHmKPnMvQ59NawHF/Ix1SjT8qSxoaWq4pM=
Subject key identifier: 85:4D:62:C0:B5:46:54:F3:CE:EB:7B:99:86:A6:1B:BE:E1:2E:AC:2C
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0198537AFC83461C42AB0E13F9E9001E5D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0FEB
Signing time: Tue 29 Jul 2025 00:00:25 +0000
Manifest this update: Tue 29 Jul 2025 00:00:25 +0000
Manifest next update: Wed 30 Jul 2025 00:00:25 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: 9PUpU5sx4lbLgF5raoFlv8eBz1lj3S9X8agqhNDOOE8=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:fc:83:46:1c:42:ab:0e:13:f9:e9:00:1e:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Jul 29 00:00:25 2025 GMT
Not After : Jul 30 00:00:25 2025 GMT
Subject: CN=854d62c0b54654f3ceeb7b9986a61bbee12eac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:d7:18:88:c3:be:a0:71:15:da:d3:24:b9:
8f:33:49:8f:09:26:24:9f:61:35:39:a1:54:78:be:
bd:c4:10:cb:f5:a5:af:ca:57:02:12:d0:7a:63:23:
b9:8b:5d:76:f7:aa:6a:25:d5:3e:12:50:ed:76:e7:
51:75:25:0b:1f:d2:5d:95:33:c5:f3:ad:24:e1:29:
1b:24:21:0f:66:75:99:28:bd:6f:65:14:41:bb:6c:
15:fe:7e:a2:88:da:b0:da:e5:75:8c:85:cb:2d:56:
fe:4d:85:0b:13:78:f3:9b:45:05:b1:b2:a3:52:8b:
ce:82:18:52:95:e8:b7:94:1b:b1:da:19:b8:71:a5:
33:a9:c0:81:e6:e4:c5:77:a6:df:5b:15:42:4d:7e:
ef:e5:93:4d:92:1d:00:e1:ce:6e:ce:f0:c8:29:99:
44:6b:21:f6:bf:57:fd:f6:b3:eb:5b:04:d0:e3:23:
36:3c:19:e8:6c:00:a2:dc:a1:e9:aa:c9:80:19:4a:
f5:be:7c:dc:27:31:f3:5c:a5:4e:82:b5:90:13:66:
fb:01:24:b9:e0:48:c6:9e:db:86:49:1d:c6:29:34:
76:ad:e4:f0:2f:99:e8:3f:d5:4d:1f:65:42:57:d2:
a9:58:2a:68:e3:27:5a:4d:eb:01:82:0b:4c:6f:51:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:62:C0:B5:46:54:F3:CE:EB:7B:99:86:A6:1B:BE:E1:2E:AC:2C
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a7:07:b7:31:35:ab:4e:bd:93:16:35:c2:71:73:82:79:7f:
98:5c:7c:a6:1a:97:cf:9c:c3:ca:76:30:c9:23:17:e1:d8:a3:
1f:7d:1d:4b:2f:b8:bc:23:53:b9:81:cb:0d:1e:f0:19:87:f8:
1a:8a:32:a9:7a:4d:87:b8:cd:34:18:76:29:92:2b:27:5c:d6:
24:c6:ac:f1:57:47:32:06:6b:e2:17:3b:08:ce:c2:33:e8:ba:
2c:62:3e:54:e3:e0:ae:2d:5e:a9:1c:01:b4:d8:48:39:2b:63:
d3:6e:a4:dc:e0:27:78:6b:6a:40:1d:2e:5b:3d:92:8c:a4:6c:
4d:40:2b:6e:de:dc:35:8b:84:e7:2e:ee:55:61:fb:75:8b:9d:
d2:76:20:07:4d:9b:b9:7f:53:30:eb:8a:33:97:36:50:89:92:
9b:b4:82:76:61:6e:a4:01:68:0e:4e:af:e3:87:39:1c:73:77:
1c:5f:c8:36:03:cc:9f:8d:7c:0a:52:34:17:85:85:b8:c9:13:
9f:30:0d:a2:d0:33:4a:c0:ab:99:62:51:4a:09:cc:c2:85:af:
2a:99:82:50:45:69:a2:93:c7:5f:e5:32:1c:6b:6d:6d:dc:0b:
a2:30:a0:e9:f0:7b:49:dd:97:ab:86:25:45:1d:34:3c:b0:4c:
97:ca:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:35 2025 by rpki-client