Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: kwMCnjNfJRRsPzPHuE5e4kvUMqRk+zgj+588adcGxdM=
Subject key identifier: B8:73:50:D3:F7:89:B5:A9:00:6E:4D:13:CA:B8:8F:85:20:24:5F:D4
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0198530DA7AB4460F3B2DD0211A7926C20E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1345
Signing time: Mon 28 Jul 2025 22:01:00 +0000
Manifest this update: Mon 28 Jul 2025 22:01:00 +0000
Manifest next update: Tue 29 Jul 2025 22:01:00 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 1eN75T/wMW5EizTkXKoIKtJUP6mOGv5kRRUe9KWSyKE=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:a7:ab:44:60:f3:b2:dd:02:11:a7:92:6c:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jul 28 22:01:00 2025 GMT
Not After : Jul 29 22:01:00 2025 GMT
Subject: CN=b87350d3f789b5a9006e4d13cab88f8520245fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:87:95:d4:91:48:d9:b1:46:15:9c:86:bf:
f0:c9:30:7b:9b:0e:98:c3:e4:6f:a7:0c:f7:0c:fe:
14:b6:59:1f:8d:8a:84:7d:63:22:04:7f:13:d7:f8:
ed:9b:d3:2f:4a:09:31:b9:2d:46:7b:ed:7e:ed:48:
f0:9d:3c:88:ed:e2:0f:5f:15:0b:5f:b9:dc:52:39:
28:03:88:08:4a:4d:13:12:b2:41:cc:72:9c:2d:a8:
8a:8b:77:2a:3d:50:b8:76:91:26:6c:a9:da:cc:03:
35:f8:e4:51:5c:f6:2b:f6:c5:02:04:5f:4c:91:73:
46:59:80:fa:1f:8d:43:37:7b:c1:f0:25:1b:d2:f9:
4f:7f:dc:ba:f2:92:04:28:a3:04:be:93:c6:59:12:
1d:6c:66:93:01:9a:3b:a1:d6:d0:43:9c:54:2b:9c:
8b:d7:1f:de:cc:f8:a1:26:bd:47:9a:b0:df:c6:80:
c3:e7:f6:67:69:ce:0b:3f:84:a0:74:81:e4:39:5b:
1c:34:57:8d:56:87:6a:99:3a:7a:f6:2e:4d:7c:b3:
95:81:45:c7:4c:03:b8:35:59:0f:fd:2d:e6:7b:c0:
98:56:7f:75:c8:c8:84:ee:32:96:97:3d:3a:39:1a:
58:90:b0:c8:d5:2e:d4:92:5b:61:e0:60:00:a5:e3:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:73:50:D3:F7:89:B5:A9:00:6E:4D:13:CA:B8:8F:85:20:24:5F:D4
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:a2:46:47:76:01:a9:ff:1c:47:08:3e:a0:5b:2d:ca:c6:
61:9a:78:c1:18:01:20:4e:e2:b5:1d:98:70:49:08:f1:75:a3:
09:d9:b3:c0:fe:bf:1c:24:48:0a:31:5a:d2:b0:31:ec:3a:88:
cd:c8:10:8f:02:a2:c5:6e:2c:c3:d1:5a:24:46:8d:a3:df:27:
08:05:22:33:14:45:79:23:23:52:08:25:f0:9e:e8:7e:ba:db:
ab:93:00:bb:91:68:ec:db:f2:7d:96:39:69:89:fc:70:a3:56:
30:d0:d7:49:00:a4:6b:b7:c6:43:41:a2:ef:96:08:1a:3e:96:
13:69:05:74:88:17:7f:e5:9a:be:ee:41:e3:aa:d5:ef:c4:f7:
ce:51:f7:60:42:9b:e7:ac:01:b1:79:e6:fb:8d:52:9a:5d:8f:
3f:96:7d:8f:0d:21:41:7a:fb:08:4c:b5:42:89:a7:c4:80:e8:
d5:26:d8:3d:9d:8c:0c:54:db:60:1f:cc:51:94:90:75:f4:b0:
e2:96:c8:5a:17:fb:a3:6e:89:1d:56:9b:e0:c6:78:24:ac:d2:
40:9d:2c:72:81:3c:01:46:fe:32:ef:90:1b:ea:9d:21:0e:ad:
7a:0a:c3:ba:59:37:73:ff:fa:b3:b1:14:68:a7:bb:34:6d:94:
bc:32:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:14 2025 by rpki-client