Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: TEunMFW0HP/9zmtN+Kjp+QGAonFmZL9nZjWaSQ7xhZA=
Subject key identifier: 42:EF:B1:48:C5:25:A6:BF:50:78:FA:C2:D9:70:B6:A9:50:74:7C:8B
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019925FB5F9E39C40350DEC2FCAB088B1785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 05E9
Signing time: Sun 07 Sep 2025 21:00:54 +0000
Manifest this update: Sun 07 Sep 2025 21:00:54 +0000
Manifest next update: Mon 08 Sep 2025 21:00:54 +0000
Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=)
2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: JnYXkzipsKBqlIxB/kcadooa+p7cg9Tmj46Xzgb4EyU=)
4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:fb:5f:9e:39:c4:03:50:de:c2:fc:ab:08:8b:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Sep 7 21:00:54 2025 GMT
Not After : Sep 8 21:00:54 2025 GMT
Subject: CN=42efb148c525a6bf5078fac2d970b6a950747c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:a2:98:a2:10:d2:c2:ef:12:df:41:90:4f:
a4:36:44:a5:07:01:17:4e:08:7d:81:12:e0:ff:7b:
22:c5:60:9c:b0:b2:32:46:97:22:6d:7f:96:2b:d8:
58:7b:9c:7e:fd:84:7f:56:65:cf:3d:3e:86:81:b0:
8e:b8:06:76:00:8c:84:00:09:da:4a:c2:f4:36:51:
28:81:ef:23:23:83:39:2f:d0:6f:aa:0a:8c:7b:7a:
51:bc:14:24:d5:bd:de:fa:9f:4c:45:ba:b4:01:44:
6c:15:47:aa:76:f9:c3:1d:bf:38:5f:0b:9f:7a:72:
12:95:08:09:f5:91:56:a1:f9:39:89:8d:64:2c:c1:
1c:65:94:57:cc:85:54:05:35:44:f3:02:4c:a3:0c:
dd:cb:a5:6e:cb:91:af:ad:3b:94:b7:f1:65:0a:4f:
00:fb:1e:a6:c3:19:0e:b7:dd:02:e4:1b:5f:a6:60:
c4:5a:03:0d:e0:f7:a0:18:b7:69:e9:4a:dd:8f:ca:
04:07:1b:cd:01:68:17:8c:17:c4:39:f4:80:06:75:
64:8f:72:16:65:c6:51:0c:12:1b:60:80:88:3d:70:
7e:7f:69:65:da:9a:b8:4b:b1:d5:23:85:b3:58:9e:
ac:7e:72:dd:ca:ba:2f:17:e5:bd:cb:fc:b6:ea:75:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:B1:48:C5:25:A6:BF:50:78:FA:C2:D9:70:B6:A9:50:74:7C:8B
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:5d:07:a1:f4:e6:d4:64:dc:b5:dc:7a:6d:87:dd:f2:32:
16:db:e0:cc:31:08:ed:bd:4c:f7:2f:ae:df:99:98:37:19:43:
6d:d2:a8:8c:1f:fa:de:0a:84:53:49:c1:ef:de:cc:8e:8c:08:
79:1f:05:8f:93:c5:79:b9:69:4c:6c:3f:24:b7:fd:49:29:30:
da:48:8a:fa:cb:9f:14:96:6d:52:6d:fb:1e:14:0d:ec:fb:ef:
e1:b8:2f:a3:c7:1e:63:d3:bc:19:11:40:03:6d:49:66:bc:5d:
6e:87:d2:b5:bc:50:d6:27:3a:30:9b:e4:ac:62:03:46:07:c1:
87:b9:95:35:c2:57:17:a2:b2:92:dd:a9:26:1b:59:45:28:9d:
56:44:75:45:0c:90:44:55:73:a2:bc:2a:fa:e9:c3:5d:9c:4c:
d3:eb:0d:cf:cd:63:38:bf:dc:e5:d1:d5:e1:0e:2f:0a:52:56:
e0:ec:17:dd:27:82:c9:44:ab:02:5d:92:29:97:8f:f7:0c:ba:
83:63:32:b7:58:f1:39:2d:55:16:2b:59:18:b2:ab:15:bb:23:
34:9c:ea:9b:f7:9b:7f:71:9f:51:e8:b5:3b:0e:26:e7:9a:6b:
6b:38:f8:9c:89:6e:b6:a8:66:63:3a:34:5f:c2:d2:72:65:d5:
39:a3:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:46:13 2025 by rpki-client