Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: v0JtRDDWsG6RwV/7X2AWbPmIsca3eXbL96wp+2Ay/7U=
Subject key identifier: 47:B7:BE:97:E8:30:B0:75:39:19:01:1F:43:CD:DD:21:8F:12:46:80
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0199345B9D83F830D1606848F23771FEFDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 106A
Signing time: Wed 10 Sep 2025 16:00:43 +0000
Manifest this update: Wed 10 Sep 2025 16:00:43 +0000
Manifest next update: Thu 11 Sep 2025 16:00:43 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: j1sEPRSQwW5713RZa+MYjRrTCuQ0drQsL4y5heEHkxI=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:9d:83:f8:30:d1:60:68:48:f2:37:71:fe:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 10 16:00:43 2025 GMT
Not After : Sep 11 16:00:43 2025 GMT
Subject: CN=47b7be97e830b0753919011f43cddd218f124680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:ea:5f:fe:a3:cd:fc:13:f7:1b:94:3d:61:
ef:87:c0:00:91:6d:54:dc:a2:6d:36:1a:56:9c:dd:
36:d7:ac:4e:89:24:0d:77:70:ee:d9:7c:d6:4c:14:
85:b5:b8:c0:53:63:9f:c9:ef:ab:01:19:88:ea:3f:
65:12:51:3c:3d:4b:43:ce:7f:f0:74:d6:a1:dc:73:
4b:18:a9:d9:81:a1:17:67:d0:c3:13:67:92:0d:b3:
6d:a4:21:1a:03:5b:91:f9:70:42:a6:d4:5e:8d:23:
66:f0:66:07:89:5b:c9:af:f5:56:91:49:0e:fc:3d:
d9:b9:9d:0a:59:fd:66:de:07:7a:26:30:04:f0:fb:
a2:7f:2a:d2:0e:46:6d:00:36:56:03:79:2b:c4:a1:
7b:5a:35:26:5c:49:56:e8:05:b0:6e:1d:37:33:dd:
00:cc:bb:f2:60:e2:65:a4:e4:41:2a:1f:ac:9d:77:
ec:48:3b:5f:72:d3:2b:0d:2b:81:bf:81:d2:28:7e:
2a:77:2d:36:3b:8b:81:f1:d2:b5:b9:b9:c3:0a:5d:
9e:30:ad:82:8f:e7:84:dc:8c:7a:c9:ac:9d:71:f9:
12:e7:50:83:10:88:1d:4b:69:eb:43:8b:1b:a8:3c:
a4:13:7a:cf:a6:72:43:3f:10:de:d5:23:cf:93:ab:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B7:BE:97:E8:30:B0:75:39:19:01:1F:43:CD:DD:21:8F:12:46:80
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:fe:e5:ce:7f:e1:fb:ae:b4:64:29:7c:85:50:eb:dd:60:
11:b6:36:c4:99:c5:8d:d4:7e:e7:49:88:38:5c:fe:3d:9e:b2:
da:3b:92:02:b4:45:20:a3:2b:d2:2a:f8:01:aa:a5:be:b8:37:
51:66:bb:39:d2:9a:12:87:26:aa:f5:d2:95:71:13:1d:73:66:
7c:4f:61:2e:20:a0:d9:57:c1:32:0f:1e:c2:c3:6e:32:cc:0b:
62:8e:4f:d3:d1:b8:5b:b8:c5:97:90:38:1b:d6:05:6c:a4:a3:
1e:ba:01:1a:64:3c:6f:ff:27:d2:72:f2:15:b0:5f:b2:88:a0:
41:39:58:9f:d1:ba:e4:91:6e:4c:97:2a:a3:02:53:c1:41:0c:
16:f7:b0:a9:d9:dd:9c:1b:94:60:17:c2:e3:35:04:a5:cb:7a:
34:21:ae:c2:77:6b:00:a7:0c:99:44:dd:0e:2f:4f:1e:39:c0:
17:bf:60:c1:4b:3d:07:72:30:35:f6:ac:7e:6c:4e:26:a7:1a:
aa:cb:1f:02:01:82:b7:34:1c:9b:37:f5:a4:74:fd:c2:d9:5a:
5c:52:2f:7c:f5:06:80:d0:49:2a:5f:86:d0:fc:d9:54:e9:df:
62:f8:46:d7:9c:fd:a6:9d:6b:4e:4f:6c:37:ab:3c:18:4d:cb:
6c:fe:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:08:16 2025 by rpki-client