Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: wpGiKHBdExWf7HDQpWtjMUQZKzSag5u+lwSv214sEzY=
Subject key identifier: A7:BC:A7:58:51:00:E3:61:D9:EA:D1:9B:60:98:99:79:6E:C3:47:1E
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019921B06AC66EC7EB8CD937C0D870D791AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0835
Signing time: Sun 07 Sep 2025 01:00:33 +0000
Manifest this update: Sun 07 Sep 2025 01:00:33 +0000
Manifest next update: Mon 08 Sep 2025 01:00:33 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: XOJ4yDLB5C/DmMPPWkdkQHicAS1Azh+BMzNgb9qEXLA=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6a:c6:6e:c7:eb:8c:d9:37:c0:d8:70:d7:91:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Sep 8 01:00:33 2025 GMT
Subject: CN=a7bca7585100e361d9ead19b609899796ec3471e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:b9:41:28:16:6e:94:47:c2:0c:f9:79:9f:
ec:0b:7b:5c:b5:92:9f:f3:54:95:c6:00:25:c0:13:
85:ce:db:5a:27:42:91:d1:b5:ac:63:92:96:a0:61:
28:a3:d1:38:e1:09:d1:e0:53:bf:4f:6d:65:53:72:
8b:8e:45:c5:7a:9e:a6:4d:77:6c:e2:1b:18:ab:b0:
75:9f:e6:04:39:3b:e7:c8:7a:43:74:b1:21:95:72:
3c:f2:40:0a:8a:6f:c7:8b:d5:d7:93:bc:e1:a9:15:
05:98:0f:2d:d9:25:e3:0d:14:69:63:ac:91:f5:73:
a8:43:8d:69:86:6e:f6:73:ff:c2:d4:bf:3e:70:22:
cf:76:66:0b:1a:57:2d:5e:ac:92:ac:f9:fc:53:1c:
6d:fc:6e:f1:32:6b:18:a7:ba:d8:6a:84:46:66:62:
bb:85:0b:0e:52:26:65:84:e8:38:83:bd:11:a3:6d:
2e:9d:af:f5:59:14:48:a7:2c:cb:d9:00:c6:08:40:
b4:78:e3:f1:bc:98:5e:35:83:53:f4:9c:78:9a:da:
a0:62:8f:00:0e:67:36:a7:c2:79:c1:4f:b4:6d:19:
e2:62:ad:0a:85:bc:a5:42:d4:79:cb:61:74:80:b8:
f0:8e:f1:95:51:3e:4d:eb:43:ed:07:a2:6a:9b:30:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:A7:58:51:00:E3:61:D9:EA:D1:9B:60:98:99:79:6E:C3:47:1E
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:92:f8:16:47:24:7f:0b:e4:2a:b8:11:da:85:8d:89:78:
ed:c6:48:ff:60:7a:99:6d:8b:66:2a:19:29:69:fb:1b:45:e4:
1c:07:a8:c6:2e:0d:71:2f:57:4f:f0:99:39:05:2c:6f:01:69:
87:6a:07:73:b4:78:b8:02:70:d0:59:64:a0:42:57:8e:6c:f3:
fa:e3:7b:d2:04:1e:3b:63:fb:09:91:38:88:13:2d:9c:0f:18:
bc:4c:cb:d8:e5:a9:fb:87:1f:98:97:9a:76:a2:26:76:9f:94:
d9:c4:0f:5f:2b:e1:2e:28:96:bf:00:35:1d:8d:ff:e0:33:e8:
34:91:19:4e:8a:78:d8:7b:3b:af:ca:40:54:64:56:0f:a6:28:
f4:60:c2:6a:6f:a9:2f:03:d6:62:0b:de:14:5b:50:b4:c2:3c:
f1:e6:de:52:63:80:97:46:da:16:ce:da:05:7e:5b:ed:52:71:
56:d1:7d:2e:41:68:bd:d8:e5:25:5a:4a:aa:1f:12:4c:e1:e8:
46:90:70:2e:12:a8:8d:82:29:22:20:36:82:2c:22:15:6b:fb:
14:1a:2b:cd:13:2c:59:c4:11:f2:eb:72:2c:8e:2c:3a:15:6e:
01:b8:24:7a:e0:c0:62:60:d0:00:ef:bd:1f:c6:c0:05:05:59:
cb:a6:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:05 2025 by rpki-client