Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: USsOfzbf8jBohTyB1doldYWbQ0N+LDkhbnSNGyEcin8=
Subject key identifier: 3B:9C:B4:BA:57:95:D1:0D:3B:A8:A9:87:2F:EB:1E:44:72:08:C3:A8
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019921B057F567CC145CC3C450B75B7ED182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:00:28 +0000
Manifest this update: Sun 07 Sep 2025 01:00:28 +0000
Manifest next update: Mon 08 Sep 2025 01:00:28 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: Yix2lJ+PHqZPeQDbl2rqo8tR55FPZxE/xaYfuv3ULd0=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:57:f5:67:cc:14:5c:c3:c4:50:b7:5b:7e:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Sep 7 01:00:28 2025 GMT
Not After : Sep 8 01:00:28 2025 GMT
Subject: CN=3b9cb4ba5795d10d3ba8a9872feb1e447208c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:d6:6a:08:35:56:22:39:e3:54:22:e5:3c:
30:1a:65:7b:0f:5b:6a:fb:a6:6d:dc:2a:d5:94:e4:
3a:a0:d3:0a:5d:9c:b6:5a:4f:2b:2c:3c:e8:1b:ae:
b2:28:87:c3:17:c7:47:af:2a:d2:8d:85:5a:1a:15:
9c:a2:2a:67:f1:db:32:9c:14:53:ed:27:84:71:a8:
b5:d9:5a:b3:66:80:32:84:18:2b:70:bd:01:a8:d1:
5c:ab:07:5f:2a:16:38:9d:0e:5a:72:8b:fa:67:67:
ad:19:63:33:9f:05:c9:06:6d:71:bd:5e:5c:45:38:
af:ac:b2:e0:89:25:a2:b8:8a:44:f3:34:64:c9:f2:
77:53:4f:74:83:87:77:36:ad:c4:20:f9:c4:e8:96:
08:0d:1b:52:70:c7:24:ec:84:8e:e3:c8:23:da:ad:
d8:be:46:c8:9c:be:93:d8:84:71:01:50:88:24:5f:
80:b1:29:81:8b:6a:02:5e:4a:22:d5:a3:c8:6d:95:
ee:8c:fc:7f:f7:b3:98:fa:cb:c6:84:5e:8d:5c:c6:
bc:11:20:18:7d:28:2e:e5:6f:d1:6f:30:03:de:32:
e1:0f:c6:05:69:bd:1e:d5:e0:a2:7d:db:3c:eb:61:
e0:f0:fe:07:21:51:d6:97:19:df:7e:26:9a:ba:67:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9C:B4:BA:57:95:D1:0D:3B:A8:A9:87:2F:EB:1E:44:72:08:C3:A8
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:19:a4:44:a6:b6:77:ab:62:f0:b4:f0:5b:69:4e:51:17:93:
6f:2e:2d:22:ed:b6:cd:70:59:dc:1e:4f:5f:6a:5d:16:e7:ea:
54:c7:e2:8d:24:2d:10:db:36:fe:03:c3:20:fa:33:1a:57:85:
88:da:2b:71:3e:c3:f0:d1:c6:cf:ad:07:b0:e0:78:ee:0e:9a:
fc:79:fa:d4:d9:f0:7a:23:a6:2d:38:09:97:4a:da:ee:0c:9c:
2d:e9:c5:11:87:3e:c7:a7:b2:c6:e6:5a:b9:d0:eb:14:ca:73:
70:6e:e7:c6:d8:3d:5f:ec:09:85:ed:19:55:1e:d3:be:df:13:
82:f2:b6:0e:75:72:58:08:ce:a0:c3:0e:ef:e8:59:4d:7b:5f:
20:4d:36:70:72:b1:d1:b1:59:a7:06:71:3f:c4:7c:19:60:d6:
90:30:b2:8f:f5:72:e4:93:ed:aa:f6:32:da:fb:59:fd:89:fa:
72:d7:32:b6:ed:4a:9c:5e:65:03:c0:8f:1c:3b:eb:d9:89:95:
ae:19:09:06:f1:c2:78:32:a2:93:f5:8a:11:37:96:a4:43:e2:
f8:f7:8a:a8:aa:d3:2c:87:02:f1:ce:7d:5f:c8:64:7f:de:ef:
7f:ee:d9:43:fa:86:71:d9:16:11:90:45:0b:1f:9d:a0:b9:80:
1e:de:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client