Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: 2f7knyYpVAwJqYms6bcxRnHtrhleoA7xzgxrRolKuao=
Subject key identifier: A7:0C:D0:44:15:EA:61:96:86:C4:9E:18:AC:D0:15:B7:26:79:63:5A
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 01992255AADB77A23068F7C1129F96D9D1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 04:01:03 +0000
Manifest this update: Sun 07 Sep 2025 04:01:03 +0000
Manifest next update: Mon 08 Sep 2025 04:01:03 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: 9xOxzxAuQzQuQ2k6S0CSn/y0mfjKXdwGnKuCyHYSMUI=)
2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:aa:db:77:a2:30:68:f7:c1:12:9f:96:d9:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Sep 7 04:01:03 2025 GMT
Not After : Sep 8 04:01:03 2025 GMT
Subject: CN=a70cd04415ea619686c49e18acd015b72679635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:43:a0:46:c5:a4:3a:04:07:f0:40:ea:20:
2e:6c:2f:21:19:f4:8d:95:99:92:e7:d3:1c:c9:c2:
d7:7a:31:72:f4:bc:f8:17:e7:5e:5b:f9:4e:da:3e:
9b:d4:3b:7e:19:1a:ad:26:bd:3c:e8:d3:71:1b:e2:
29:57:21:72:6f:9f:12:bf:2a:cd:00:8a:b0:a2:78:
37:cb:2b:af:e9:e6:0f:72:bd:f2:83:63:ba:ca:d4:
f9:13:56:e6:63:78:42:c9:35:9a:39:cb:99:a5:fb:
b0:42:07:4d:a3:2c:63:23:eb:c5:c5:a0:2a:d1:f6:
4a:c6:d9:ed:bc:48:c4:3f:94:31:f8:52:83:6e:83:
f2:be:b5:78:86:b8:71:1b:00:87:c5:2c:a3:7f:54:
cb:2f:a4:1d:9e:13:4b:37:47:a1:d0:2c:b0:82:f7:
e1:cf:5e:e7:e4:8a:6e:73:ab:e2:ae:d9:0f:03:3f:
c1:15:1d:3c:f7:66:23:37:0a:72:2d:0e:55:7a:1d:
26:3c:66:ae:22:ee:ba:e6:da:55:19:c7:9c:07:fc:
4d:d1:c6:f5:af:8f:58:be:9f:3c:66:6d:b5:a0:23:
75:c1:d2:2c:f4:a9:34:89:b0:0f:38:99:36:a3:12:
b2:e7:5c:b0:e1:50:2b:73:b0:01:6c:c7:ba:64:3f:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:D0:44:15:EA:61:96:86:C4:9E:18:AC:D0:15:B7:26:79:63:5A
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:40:30:cf:af:f2:fd:84:da:a8:03:54:c2:70:a5:b6:7a:
3f:c3:42:d2:dc:34:f2:ab:21:8b:00:40:f6:e1:78:6c:27:75:
e0:bb:97:3b:14:27:0f:c8:12:6d:ba:59:d5:33:69:e5:2c:52:
be:0a:c6:ed:8e:df:e1:75:45:39:72:b5:16:6b:69:76:e6:ad:
ab:9a:a9:9b:8f:c4:bd:48:65:51:55:e0:dc:01:26:3e:b0:fb:
a9:e3:79:96:2e:f7:cc:02:cf:85:c9:39:8b:59:86:cc:6c:c7:
3e:d8:74:7b:7f:a2:69:ee:b6:ea:9f:74:63:ee:d9:16:1f:7f:
89:1a:e8:be:53:e6:0f:64:88:68:dc:13:d7:e9:e6:37:3f:0e:
6d:89:9f:88:d5:93:67:ee:b6:50:92:1f:28:81:00:02:2f:26:
b9:0b:f1:79:e6:3f:5e:fe:25:12:26:c8:cb:b2:2b:92:71:ac:
6d:40:86:e9:48:6f:4d:26:fd:df:67:75:68:c4:1f:0e:41:74:
03:34:79:8a:f6:78:22:01:36:79:02:66:ad:21:d4:02:b1:e7:
25:69:fc:40:46:26:3c:b4:15:92:f1:dc:87:ce:f5:73:7f:c6:
15:5d:84:c2:6a:ae:f3:87:2c:d0:8c:43:9d:f4:1c:61:89:24:
4b:b8:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client