Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: WVHVIL5ecP5nQCr5Lhc/LpE/5YRt6OoEYFsQkiBacyA=
Subject key identifier: 0F:16:8D:EC:FA:62:76:11:19:63:F3:B7:DA:69:9E:03:35:29:51:D5
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 0199233109487E7A6A3787E7F06D23A89133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 098C
Signing time: Sun 07 Sep 2025 08:00:39 +0000
Manifest this update: Sun 07 Sep 2025 08:00:39 +0000
Manifest next update: Mon 08 Sep 2025 08:00:39 +0000
Files and hashes: 1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: ftw9RrHzOXGJw6quSVTGlZH1gvWFHpDkoB8dIujzbso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:09:48:7e:7a:6a:37:87:e7:f0:6d:23:a8:91:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Sep 7 08:00:39 2025 GMT
Not After : Sep 8 08:00:39 2025 GMT
Subject: CN=0f168decfa6276111963f3b7da699e03352951d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:5e:3b:4a:a5:57:9b:38:48:9e:24:a9:4f:
7a:a0:41:f5:b5:00:a1:4b:01:47:93:43:38:f8:b1:
56:7d:a4:58:ee:98:7b:bc:d9:72:41:fc:05:fc:11:
a4:aa:d8:69:6f:0c:bc:0d:88:ba:17:9b:05:03:d5:
17:72:fe:ce:ae:31:e3:f4:03:d2:ea:68:42:f5:b2:
2e:ef:95:2c:71:a2:56:cf:b9:20:86:dc:86:cb:d9:
6b:0f:8c:2e:e9:6c:93:c3:c4:f7:67:51:05:b3:63:
b7:69:71:83:56:82:bb:64:b6:a1:40:14:c3:3d:d3:
5b:21:fc:3b:12:84:40:3e:a6:d5:10:18:e7:e9:05:
2a:12:08:5e:f3:34:5b:fc:6b:e0:e6:58:b4:f2:54:
df:01:41:8c:f5:5f:93:96:a0:f4:ae:85:1b:06:2d:
7a:58:f7:42:f3:90:b3:76:a7:2b:83:50:d0:c4:74:
a8:73:14:5d:a5:a5:40:08:22:6e:cc:18:c1:af:38:
c6:d0:73:2c:37:91:9b:be:0f:9f:ea:8a:2d:30:89:
c8:9f:ff:ab:1e:45:5c:67:82:1b:73:46:b2:41:b5:
a9:ec:bd:fd:50:9f:32:ad:da:cf:e4:34:e2:fe:ab:
56:24:af:b3:6b:8c:aa:e0:0e:d2:00:23:cd:8f:bd:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:8D:EC:FA:62:76:11:19:63:F3:B7:DA:69:9E:03:35:29:51:D5
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:10:58:c4:c9:87:0d:cc:c7:ca:5b:af:72:a7:ac:9b:12:a5:
cb:2d:12:1e:22:e0:1f:b3:09:81:d1:07:f2:cf:01:a3:2e:f2:
9c:7f:67:1c:0d:29:db:a8:27:42:f7:15:bb:18:e8:fa:9e:e5:
aa:9f:c1:80:ad:82:1f:25:1d:f1:93:fc:f3:48:bc:fd:3b:2b:
91:b7:21:3c:ad:01:7c:14:dc:e5:ee:71:56:0f:8a:40:79:b9:
3f:ac:5d:28:4d:df:cd:fe:f4:8c:7d:14:b7:0f:51:9c:92:fd:
6c:e8:e4:52:18:35:06:ad:85:7a:0b:be:b1:fc:be:cc:0f:26:
30:be:76:3e:03:49:7b:ec:ce:92:52:8e:a6:a4:08:c4:94:b6:
de:41:92:29:6c:4f:03:32:2d:f6:55:69:e9:d6:7d:2b:4a:d5:
6a:4a:4b:84:fe:2b:e9:4c:09:97:61:a1:9b:d0:aa:bc:0d:e1:
63:16:06:f3:97:e1:09:03:6d:1b:83:23:af:8c:0b:0b:62:fe:
94:be:64:36:4c:d6:03:7e:54:5f:d2:5e:17:ff:de:f8:ce:5d:
d7:20:6a:22:42:19:67:8b:3b:75:ca:08:b5:e9:64:a8:07:80:
97:0e:a3:8b:e1:cb:f5:3d:4f:b1:b7:3b:93:58:8c:1b:14:17:
9e:f7:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:17 2025 by rpki-client