Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File: D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier: OkAL/s1CsuDmLGNApoGNG5CJR/JZWtQfIeLOEBQdf74=
Subject key identifier: BE:96:9D:F0:CF:E5:11:B3:FF:0D:96:7E:F4:51:73:E1:F4:A7:0B:C7
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 01991BE5B22890D3E1CCB7EEE1BE7067C116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number: 0937
Signing time: Fri 05 Sep 2025 22:01:01 +0000
Manifest this update: Fri 05 Sep 2025 22:01:01 +0000
Manifest next update: Sat 06 Sep 2025 22:01:01 +0000
Files and hashes: 1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: yKvLsbeb77mgNI3eyv93+h/JJTdDLWoDDxhMxgF6hV0=)
2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:b2:28:90:d3:e1:cc:b7:ee:e1:be:70:67:c1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Sep 5 22:01:01 2025 GMT
Not After : Sep 6 22:01:01 2025 GMT
Subject: CN=be969df0cfe511b3ff0d967ef45173e1f4a70bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:4d:3b:84:3f:d4:4b:b1:00:b4:3a:4f:06:
73:a8:95:a2:38:4f:8e:85:45:41:41:fe:d6:f5:df:
55:60:33:a9:23:23:6b:1d:c2:b0:7b:e5:84:90:96:
b5:9a:b9:13:81:84:bb:a0:60:de:d3:93:c8:c0:77:
ee:e4:95:5b:d5:d0:f3:ca:88:64:97:1f:99:36:c3:
46:d2:6a:1b:48:48:16:eb:26:d9:5d:c3:21:5b:00:
87:54:a3:cd:f4:e5:b1:1a:83:a0:10:bf:c0:aa:c0:
f5:f2:fe:07:f0:ba:97:fd:95:ba:d6:f8:0b:82:63:
2b:b6:c0:c0:c3:81:c6:ab:7b:af:9b:47:0e:af:c6:
79:fd:46:1e:91:4e:25:5e:c2:b9:71:25:03:9b:e6:
aa:a6:1f:99:2d:31:5c:4e:1b:b4:82:83:64:a7:d8:
1f:8e:4a:9b:6a:a6:a0:38:8c:f9:94:88:e4:64:da:
3e:ad:a5:29:d4:df:ec:90:f3:51:f2:2c:d3:13:82:
51:b4:06:e0:02:96:5c:61:dc:a7:11:c9:4f:d2:09:
3a:2b:a3:7c:9e:b6:b4:3c:6a:ef:3d:27:c2:64:59:
da:75:84:90:b9:a6:e3:39:26:ae:09:3a:e2:fb:f4:
0b:59:16:d8:8f:d3:5d:b2:a0:e6:9d:71:42:20:87:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:9D:F0:CF:E5:11:B3:FF:0D:96:7E:F4:51:73:E1:F4:A7:0B:C7
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:f0:82:1f:0e:86:79:6b:1a:50:73:03:c3:d6:66:14:48:
7f:e0:44:bd:9c:17:40:5e:34:9d:9a:24:15:77:42:48:82:46:
c0:a0:94:a9:4c:5d:ce:58:8f:58:30:65:8d:f9:0d:8f:2f:0a:
ac:ef:ff:85:f5:8e:ae:96:cd:e0:41:15:5b:23:78:e4:0c:7b:
84:26:a8:51:68:58:5c:d7:3e:cb:4e:f3:38:4a:bd:06:a3:ae:
72:27:88:ca:24:6a:e3:2e:1b:02:97:89:f3:3f:82:0d:48:16:
d8:63:1b:c7:27:f7:b0:11:1b:bc:59:61:32:70:cb:cd:19:31:
37:fa:f8:bb:47:37:6f:af:4e:fc:df:68:01:6e:7a:f9:73:5b:
71:0b:84:49:2a:9c:b4:4b:f0:f2:65:4c:27:b9:df:a3:97:56:
97:ec:62:4a:5d:ad:03:c1:d1:b0:90:38:9f:4d:8e:33:70:66:
cb:5b:65:ce:4e:6e:21:6c:8e:02:32:3a:36:d5:66:4c:29:f6:
f2:05:d5:cb:73:be:9a:50:54:2f:39:8e:0d:76:7f:45:05:38:
c5:62:23:d1:2e:a8:df:79:87:f5:e2:4f:09:28:aa:1f:ae:c3:
82:3f:b3:50:c2:21:7f:ef:93:96:14:48:96:fb:65:88:c2:f3:
da:4f:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:16:55 2025 by rpki-client