Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: ctBEh0H3zVhCQfr5e8a+fhnQFD7MoQhFbbfOzG3njGU=
Subject key identifier: 6C:EB:36:B5:0D:4B:83:69:56:90:CE:8A:FC:E1:2B:5F:8B:96:93:B2
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0198413D947324E8814E3D85FF0DCB112089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0F63
Signing time: Fri 25 Jul 2025 11:00:11 +0000
Manifest this update: Fri 25 Jul 2025 11:00:11 +0000
Manifest next update: Sat 26 Jul 2025 11:00:11 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: Y87B+G5uNuO9AEJsjwup+ETld2AbyJUS0vK8uZtxVq8=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:94:73:24:e8:81:4e:3d:85:ff:0d:cb:11:20:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jul 25 11:00:11 2025 GMT
Not After : Jul 26 11:00:11 2025 GMT
Subject: CN=6ceb36b50d4b83695690ce8afce12b5f8b9693b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:59:24:2f:1b:54:08:b8:48:b4:40:45:c7:
b9:f9:1e:63:90:6d:d2:63:d3:50:41:34:b6:37:c7:
7a:8f:c7:d1:c6:c8:64:f4:7f:64:97:ac:63:67:7b:
31:b5:2c:9c:36:be:2a:f6:6e:70:02:21:96:0b:04:
d1:08:f3:3d:fb:35:43:4b:d8:64:53:41:d2:6b:18:
fa:2b:9d:cf:e4:a0:df:c5:75:93:7e:09:45:47:84:
97:97:9c:f1:39:8c:cc:80:5c:5c:b7:85:09:e5:24:
f5:ba:16:67:c2:64:0c:37:08:48:56:3c:e4:fe:1d:
0f:65:2b:4e:4f:62:1d:7f:25:04:21:d4:13:36:3e:
23:10:e9:27:7f:af:64:5e:83:c9:74:a4:2e:02:a2:
1d:47:35:1b:f3:e7:24:e7:53:3b:cf:26:6f:12:91:
ee:49:21:23:8e:95:ee:1a:f2:dd:4f:3a:96:0e:26:
09:09:3d:93:bf:9a:1d:a7:07:30:92:e7:8d:4f:aa:
45:4a:ec:4f:7d:88:fa:df:c7:52:88:98:1c:9d:c5:
ce:72:c1:43:2d:e1:19:58:4c:13:95:bc:61:49:ef:
c5:01:cf:57:92:c2:9a:e4:d8:8d:93:31:14:fb:61:
17:27:b7:37:ab:c7:ca:96:16:0e:ad:02:47:44:6d:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:36:B5:0D:4B:83:69:56:90:CE:8A:FC:E1:2B:5F:8B:96:93:B2
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5e:7f:05:f2:04:ed:f5:3b:92:81:cd:7b:b6:3a:20:9e:f4:
74:6d:74:5e:ad:05:1b:c1:1a:a8:a6:a6:b0:28:06:b7:7f:54:
9a:6e:50:96:79:f2:7b:1a:73:a8:75:92:05:9b:a9:94:58:8a:
a5:21:ce:3d:f4:24:16:a3:da:62:3d:76:17:90:3c:9d:0f:08:
01:68:44:f0:70:c8:ad:23:72:40:7e:a3:8a:e0:c2:84:b3:c5:
c3:b9:de:63:28:fb:1b:75:06:f4:55:88:2d:9c:7f:70:14:93:
0a:2c:1d:6d:8b:6c:ec:10:2d:32:85:21:52:9b:f8:7f:4d:0c:
62:3f:dd:f5:3f:cb:13:d1:64:f8:5d:89:63:b7:f3:3b:3c:7e:
88:36:37:79:53:ee:1c:17:13:63:a6:94:08:45:bc:d5:7a:89:
bc:bd:a9:05:f2:ac:1f:8c:a0:82:ae:ab:63:e1:2b:62:93:33:
54:f7:9c:0e:21:b8:47:53:fc:8d:5b:e2:90:e8:96:cc:80:fc:
21:8f:cd:d2:f4:78:c5:6a:f1:3f:9b:e8:62:f7:20:b3:e1:7d:
79:31:74:06:d5:4b:87:3d:72:36:8a:e1:43:fb:d9:54:40:be:
19:f1:23:86:6f:32:32:e5:8c:a8:3a:dd:d6:1d:21:d7:64:d7:
fb:09:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:00:20 2025 by rpki-client