Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: ZXBryLieNhijh03UiGKv5UQxBZXtEbOiN7nimgEckAA=
Subject key identifier: 28:C3:ED:A2:E6:CE:D4:A3:A7:3E:2A:9F:AB:6E:F4:8D:64:A5:94:DF
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 01993680A8BD3AFB967A35433169840C6249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0D61
Signing time: Thu 11 Sep 2025 02:00:25 +0000
Manifest this update: Thu 11 Sep 2025 02:00:25 +0000
Manifest next update: Fri 12 Sep 2025 02:00:25 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: OihCYL4KGNmM9wSropDupkAZDyCgy/ca7PgBuXfQaRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:a8:bd:3a:fb:96:7a:35:43:31:69:84:0c:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Sep 11 02:00:25 2025 GMT
Not After : Sep 12 02:00:25 2025 GMT
Subject: CN=28c3eda2e6ced4a3a73e2a9fab6ef48d64a594df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:11:52:96:74:1c:32:75:eb:9a:b6:a4:18:
a2:3d:9f:64:e2:3b:83:33:79:3f:ed:3f:50:2e:94:
25:08:c8:1f:ba:50:14:f2:50:54:57:3e:69:ca:2a:
f7:e4:e6:b2:6c:07:31:82:f8:46:e5:86:a0:56:b9:
c9:02:a2:90:15:34:44:d9:74:89:28:50:21:0f:a4:
3a:2c:f6:cf:6b:ba:1b:b5:04:f0:66:0b:8f:2d:1b:
88:11:6e:ba:2e:56:16:3d:0d:e9:93:f6:f8:fc:7d:
19:6a:2e:e0:63:df:71:e3:df:bc:75:f2:fd:5e:38:
ec:0c:8b:b0:3a:78:18:47:a0:6e:82:a7:6b:dd:59:
26:ff:c0:19:7c:95:58:5b:51:cd:3a:0c:1e:5b:87:
c0:bd:d2:ad:68:52:cc:aa:48:d4:e8:15:4d:1b:f7:
db:62:27:97:89:24:38:ba:5b:2b:20:30:aa:74:33:
da:42:62:2d:76:f9:d2:fd:28:63:70:ce:66:a2:c5:
77:31:ec:cf:d1:85:12:18:80:f3:4e:50:02:04:82:
6b:a0:05:26:61:93:de:44:ce:f6:f9:75:ff:14:37:
03:c5:1a:bd:21:d4:35:e0:bd:ac:76:4f:60:03:ae:
ea:cc:a7:43:13:47:7b:a4:c7:b5:85:43:87:89:57:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:ED:A2:E6:CE:D4:A3:A7:3E:2A:9F:AB:6E:F4:8D:64:A5:94:DF
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:95:ca:d6:2c:39:b7:dd:52:c1:95:76:ff:1b:8f:40:3e:
12:4d:d9:d7:a0:40:11:39:d3:e0:66:6a:3d:5d:f8:af:28:47:
a9:74:32:27:ae:4a:00:f6:6d:bd:87:c4:18:20:a3:6d:1f:eb:
6d:1e:38:8c:c1:d1:d3:b3:8c:4a:ba:d8:95:be:01:bc:11:15:
9e:c2:65:00:ba:f4:3e:15:1a:6b:9b:bb:34:e9:c2:84:4a:2b:
ec:5c:bc:80:2b:fb:bc:fe:8f:40:67:bd:a4:0a:cb:19:bc:0d:
8d:8a:c8:c1:f4:00:fb:3a:8b:b4:0e:58:44:9d:59:4e:49:6e:
a2:5d:47:c5:5d:4b:be:b1:85:b6:6c:14:31:ba:e7:39:e9:f1:
3c:54:d8:81:6f:f1:b5:b4:2d:9a:aa:44:48:63:2c:2f:20:9b:
98:7b:37:b9:fe:59:49:94:ce:f6:ce:30:3b:d6:9d:49:06:26:
54:4b:18:76:82:48:09:6d:f7:9a:cd:c6:a2:ec:65:4d:c7:c3:
0d:d9:d4:5b:bd:b3:fa:8c:dd:37:30:6e:ef:1a:3c:5a:f7:aa:
03:4f:db:53:9c:a6:71:dd:fe:0b:4c:db:4a:a7:7c:e0:87:7e:
5d:a7:15:62:05:ce:50:e9:3f:6f:67:b1:f5:34:ca:a8:01:33:
9c:61:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:40:18 2025 by rpki-client