Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: EMAEekXoFc8KYpu3Q44DlM+q6I7Lq3QmJsFJe0Rwq7Y=
Subject key identifier: 94:FA:E4:C9:0F:C2:38:C7:48:AF:B8:5A:FF:24:6C:6D:C9:77:73:70
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01991E7850321E0EA02C93EB0FA216048355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1106
Signing time: Sat 06 Sep 2025 10:00:25 +0000
Manifest this update: Sat 06 Sep 2025 10:00:25 +0000
Manifest next update: Sun 07 Sep 2025 10:00:25 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: GmYvTrtQxWm3xU0eA3o3aFyHwugh6TS1YxLDZedkhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:50:32:1e:0e:a0:2c:93:eb:0f:a2:16:04:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Sep 6 10:00:25 2025 GMT
Not After : Sep 7 10:00:25 2025 GMT
Subject: CN=94fae4c90fc238c748afb85aff246c6dc9777370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:1e:70:d1:3c:c0:82:14:84:62:aa:4a:40:
3a:28:e1:73:46:f3:aa:d1:00:2f:22:ae:9a:af:aa:
0b:3d:10:38:56:c6:6a:0b:35:8f:71:71:18:2c:b2:
13:15:f3:9b:c8:da:bc:e5:64:db:87:01:e3:e5:c6:
4a:ec:f7:b4:b0:08:c2:96:9f:41:be:4b:57:17:33:
8b:ad:16:19:4d:54:99:3a:9f:20:47:d2:c8:00:8d:
50:81:ba:3f:95:b5:05:09:ec:24:8a:c5:9b:67:8c:
cf:50:26:31:68:17:f3:a9:d2:c4:24:69:a1:c9:06:
9c:0a:c2:7b:d0:ea:7d:cb:87:fa:ff:8c:91:c0:b8:
8f:46:a8:56:5a:9c:01:7e:2a:42:b4:ea:43:d0:8e:
0c:93:d1:95:ef:18:1d:84:13:6b:2b:cf:4f:04:44:
4f:dd:e8:ed:4b:e8:16:60:c4:66:3a:b3:41:6a:1f:
81:82:c8:0c:ff:59:74:c8:63:31:57:67:c3:2f:58:
8c:a8:98:21:83:fe:9e:d6:c1:27:19:20:01:f3:87:
c1:8c:7b:84:67:10:33:f1:31:0f:9c:e3:c1:91:c8:
ec:e9:16:5a:b7:30:21:c5:13:2a:f9:b8:40:cb:82:
f3:60:61:e4:60:35:f9:22:e6:ce:ec:3e:4e:c4:75:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:E4:C9:0F:C2:38:C7:48:AF:B8:5A:FF:24:6C:6D:C9:77:73:70
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:9b:b0:d7:c0:72:c4:78:12:9c:2c:45:14:44:3f:66:4c:
e9:46:08:e6:d0:25:49:41:c9:87:30:f4:37:61:c8:56:a6:cb:
19:34:92:bf:53:ce:cd:55:35:5e:a5:b5:23:66:cc:4f:63:ae:
29:d6:21:40:1a:70:77:7e:78:34:17:36:a0:12:9c:49:ba:43:
d7:1f:4a:86:b9:d6:4a:8a:cb:26:c9:fe:8e:73:dc:f1:87:28:
04:0f:10:41:a1:e3:2a:ab:14:8c:b9:e4:d9:51:af:2a:73:a3:
58:fd:ba:35:ed:29:65:95:e0:29:39:99:3c:71:2d:51:ef:93:
09:c7:0e:5d:01:d4:43:f5:fb:96:c7:a4:f6:4f:c6:2f:f7:04:
9b:cf:71:f9:d7:f6:29:cc:f2:12:db:d8:c7:02:a5:57:bf:fb:
42:98:79:70:e3:1d:16:0a:9e:f2:e9:60:6a:b6:c8:2d:bb:0d:
42:17:93:a5:d4:33:f3:f7:48:12:52:de:1f:6f:8a:97:0f:af:
9e:be:b9:04:9d:22:4f:9b:ec:a8:ff:73:f0:b4:f5:81:41:e2:
b8:8a:f1:2c:a4:3a:20:e1:9e:8b:b6:c8:c8:ed:68:ea:1c:d3:
9c:21:bb:30:7e:0b:b8:7b:d3:f7:e2:07:70:b5:d9:46:01:a7:
30:22:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:11:22 2025 by rpki-client