Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: se3dNgLAcYhhvdFVpnKfuHTvEp9JLfAISd/Tv13iMVo=
Subject key identifier: C7:41:34:71:8D:E4:28:FD:E5:AC:B1:98:5C:53:6E:BF:F1:A1:85:4F
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 01994E1CC49183734ED2DE61014FE7E3ABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0C88
Signing time: Mon 15 Sep 2025 16:02:12 +0000
Manifest this update: Mon 15 Sep 2025 16:02:12 +0000
Manifest next update: Tue 16 Sep 2025 16:02:12 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: GBG20x09IyJGY4vpp8zpDRJWNmgufhuqloLTwrqgvt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1c:c4:91:83:73:4e:d2:de:61:01:4f:e7:e3:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Sep 15 16:02:12 2025 GMT
Not After : Sep 16 16:02:12 2025 GMT
Subject: CN=c74134718de428fde5acb1985c536ebff1a1854f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:8c:8c:76:cf:b2:ea:06:bd:42:83:c3:ac:
f8:f6:1b:32:db:53:1c:9f:10:71:9a:b4:55:b6:bf:
33:77:f1:3c:2a:1c:da:2e:6a:9e:4a:56:fa:03:e8:
53:4e:0e:60:7f:59:c8:dd:b6:ae:cb:1f:91:a1:80:
fc:33:37:41:48:2c:52:67:50:4d:fe:05:97:f0:b1:
82:01:89:29:04:05:7d:d6:52:15:ec:40:21:bc:2f:
ba:37:5d:9b:55:56:55:7e:58:02:1c:8d:c4:7f:4d:
ed:3e:30:21:a6:71:27:ef:76:6e:01:20:65:71:30:
c3:b4:12:a1:8a:8d:b1:9c:17:fe:ca:b9:bc:c8:b5:
66:67:dc:7e:0f:b9:a7:7b:ed:42:1f:c1:72:6f:cd:
6d:a6:8f:3f:55:74:08:15:25:2c:32:b8:bb:08:a0:
46:43:11:b2:6a:04:f9:e2:47:99:97:6d:7a:2a:76:
b0:57:7a:e7:39:a5:c0:4d:b5:9d:8a:05:1b:e8:39:
a5:2e:e9:9a:f3:53:02:6e:1f:94:7e:1b:39:3f:9b:
76:dd:68:b5:d3:4f:94:93:be:a7:e3:d2:67:d1:3c:
a3:54:4b:69:b0:2f:ac:af:25:ff:bb:c2:d1:c4:cf:
00:17:95:bc:90:32:0d:5c:cd:ab:b3:9a:08:55:10:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:34:71:8D:E4:28:FD:E5:AC:B1:98:5C:53:6E:BF:F1:A1:85:4F
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c9:01:6c:66:2a:1c:bf:7b:69:75:dd:01:9d:09:14:64:e8:
fb:16:2f:3b:39:0c:98:31:4e:f2:0c:12:aa:42:14:bb:49:52:
ba:74:47:69:a9:69:a2:75:b2:f7:31:f5:7d:66:11:2f:c2:d4:
22:ef:76:3e:4c:74:cd:8e:e8:64:84:83:f6:39:e9:66:00:5a:
7d:77:43:32:df:70:e3:c4:44:7c:54:e1:d8:3b:40:26:f2:f8:
a9:80:6d:17:85:15:c3:b1:ca:d9:8b:c0:be:71:df:e1:3f:b3:
82:46:89:3a:e0:8f:fc:28:23:dd:01:9b:25:78:9f:6a:c0:a4:
ca:72:8d:ba:4a:d4:57:ab:f3:b9:a4:9f:57:4b:c9:e4:09:e4:
16:82:39:31:fd:85:a4:bf:d8:09:d8:52:b4:06:02:90:be:db:
a9:f4:4d:b7:72:20:a7:55:4c:39:27:8f:88:ea:7a:57:5b:c8:
8a:a1:b1:d5:ce:8a:be:3b:b0:e8:e7:59:e2:60:ec:90:c0:75:
7e:fc:b8:87:58:07:0d:e7:a2:e8:d7:e3:03:f3:79:17:1a:e2:
b0:2d:e2:04:45:aa:e3:a1:39:ae:d8:50:f6:de:c7:c0:89:a3:
21:85:c0:8e:c0:29:8d:43:76:ea:4e:78:a6:e8:1c:e4:27:16:
9a:e7:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:01:09 2025 by rpki-client