Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: uRt09lcCsVQbKLgr2OwCEYJ8XO2U3It6cci9+zBsGW0=
Subject key identifier: B0:6D:7D:A7:71:4C:D7:49:CB:97:72:AD:BA:18:E4:27:61:DF:2A:35
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 0199239EF817F876539B41B72354D39A8161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:00:44 +0000
Manifest this update: Sun 07 Sep 2025 10:00:44 +0000
Manifest next update: Mon 08 Sep 2025 10:00:44 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: OdC3RLtVi36l1pwmki8QFA8JXOWeMoRWRg2I4PKcRd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f8:17:f8:76:53:9b:41:b7:23:54:d3:9a:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Sep 7 10:00:44 2025 GMT
Not After : Sep 8 10:00:44 2025 GMT
Subject: CN=b06d7da7714cd749cb9772adba18e42761df2a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:bf:d3:40:c3:dd:d5:01:9e:4e:85:f6:f5:
d3:88:13:03:fb:e4:25:3f:43:8a:15:6b:ea:09:c8:
7f:ee:0e:fb:9c:a8:91:ce:48:c8:98:e2:6f:80:b0:
52:58:a2:50:92:41:52:4e:44:51:5f:3d:e0:e0:4c:
3c:f6:6c:f0:fb:cb:28:2d:88:5d:cc:33:e6:67:32:
99:4e:69:8b:b8:d1:c1:1b:2c:91:c8:99:ba:7b:1a:
bf:0a:4c:df:20:d7:4b:30:1b:d2:bc:4b:f9:72:19:
b3:86:8e:5f:b6:a1:d8:b8:a7:1d:b8:e0:04:69:de:
38:ca:e6:bc:76:30:d1:4e:49:1f:c2:af:16:8e:5b:
13:9b:78:65:17:10:64:a7:fc:76:32:7a:a6:a2:71:
92:07:04:2b:c8:03:3e:a0:35:c4:7d:5a:af:fa:7b:
cb:ce:ff:12:0d:1d:8c:a1:01:29:36:d7:d8:d5:85:
9f:77:76:cd:bc:34:de:da:4b:5e:67:c4:f1:6c:bd:
3f:1a:6d:f2:20:5b:39:91:f6:5a:aa:b3:ce:e8:35:
cf:f9:95:a6:65:b9:49:93:44:7b:66:6b:88:34:3c:
34:e0:56:8e:de:9f:4b:b3:3f:44:02:cf:49:ce:50:
1e:3b:cd:86:b8:18:59:60:f5:81:c9:f3:bd:3a:20:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:7D:A7:71:4C:D7:49:CB:97:72:AD:BA:18:E4:27:61:DF:2A:35
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:05:70:6a:cd:aa:03:e3:a4:ee:ec:ce:3d:64:09:cc:bd:
58:ec:ac:e8:b5:e7:a9:39:a4:78:56:84:3c:52:8a:88:98:7e:
f7:0c:62:eb:ed:72:c3:59:4d:16:59:bd:78:4c:bf:03:31:fb:
fd:2b:4f:30:6c:6e:70:2b:87:01:71:d8:de:21:4e:e5:16:51:
fe:54:c0:94:1d:0b:6a:d0:e5:26:43:84:f8:24:dd:fb:58:b0:
73:ae:00:be:3d:36:15:00:d0:7f:8e:86:ef:1b:2a:72:c9:a8:
4e:3e:bc:a3:39:f9:b7:cd:da:75:a1:3f:fd:d6:0e:f2:66:97:
32:a1:c3:a9:5b:1b:ee:5b:96:02:d1:22:4f:b8:c7:b9:90:b1:
51:3d:3c:26:49:20:f9:78:e7:bc:b0:45:f1:2e:a6:31:b9:6d:
f9:36:ba:96:01:20:aa:b7:41:ac:3f:11:bd:33:f0:88:f4:34:
96:0d:6d:00:3c:2a:cf:b7:07:ec:f7:7f:61:7e:dc:df:8b:6f:
d3:71:f9:e2:13:ee:81:37:33:97:f2:38:86:30:5f:82:75:71:
d2:60:9e:c4:f0:cb:39:5d:c0:24:0e:d7:67:73:44:c2:e1:d7:
75:c2:b9:30:3f:d7:87:38:eb:fa:a1:85:4b:b1:0b:3b:85:55:
76:48:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client