Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: EBnd9k08JE+w6YCFpB83odic0A5CopaQ1VzwYP/9Xnk=
Subject key identifier: D7:D9:18:55:A9:57:D8:29:88:1C:4F:0D:3C:0E:D2:AE:E0:68:47:7C
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019933805A7B183E80D7732F05613C51F0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 0FEF
Signing time: Wed 10 Sep 2025 12:01:13 +0000
Manifest this update: Wed 10 Sep 2025 12:01:13 +0000
Manifest next update: Thu 11 Sep 2025 12:01:13 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: Z7pGnRmwh7OD6yAJSXhNWUfUUvrPso+3HvpKlchI4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:5a:7b:18:3e:80:d7:73:2f:05:61:3c:51:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Sep 10 12:01:13 2025 GMT
Not After : Sep 11 12:01:13 2025 GMT
Subject: CN=d7d91855a957d829881c4f0d3c0ed2aee068477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:69:26:71:10:bd:aa:b6:cc:f8:b4:3b:0e:
2e:47:07:e0:13:63:a1:87:3a:8c:6d:74:b7:6f:e0:
e1:74:1b:dc:4b:b8:f6:71:74:f7:3b:d3:66:a7:53:
6a:ce:dc:4b:e2:27:b4:5c:ac:77:25:cb:c9:45:66:
0a:3a:3c:eb:d5:08:e9:96:b5:c0:c6:6d:4d:bb:35:
3b:96:63:78:d6:d0:a7:44:ad:30:e8:e8:84:58:2f:
35:ad:ae:4c:73:28:e1:e4:84:4d:0c:47:27:4d:99:
21:f1:ab:b5:c4:3d:bd:06:6e:b9:21:2f:81:d8:ff:
70:51:a4:23:43:e0:8c:40:a0:de:de:b4:d2:49:6f:
2a:6c:32:d8:c5:4d:38:57:a4:42:b3:9a:cb:65:99:
47:01:4f:96:16:04:3d:b5:21:25:68:1a:5d:77:51:
48:13:53:b1:72:c0:46:68:05:62:29:cd:09:5b:2d:
6e:6b:5a:29:12:d7:fd:95:b7:66:60:c9:5e:f5:02:
a8:6f:eb:01:89:f9:17:5a:49:dd:a3:72:af:6d:18:
18:85:ea:a9:87:70:10:e9:e1:e0:c4:21:f1:38:c9:
a5:77:3f:d7:d0:42:69:53:00:20:dd:64:18:dc:4a:
2b:cc:82:74:41:17:00:4e:dd:03:7f:96:2f:d6:ce:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D9:18:55:A9:57:D8:29:88:1C:4F:0D:3C:0E:D2:AE:E0:68:47:7C
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:f6:8f:44:94:fc:cc:6b:bf:83:e8:75:7b:e2:86:8a:2e:
cb:db:69:f6:73:43:26:81:0a:c2:c5:8d:d8:2d:16:3f:c7:f1:
20:15:6d:b9:6f:81:00:32:bd:19:1c:9b:c3:77:86:90:e5:bd:
54:61:79:91:0c:79:6e:8b:9f:b5:1f:3a:db:ad:97:e0:60:e3:
0e:e6:c5:6e:7d:a1:bc:01:7c:74:c2:c9:54:30:82:7e:5b:7b:
3d:ff:40:66:f8:c3:ee:f2:81:e1:da:21:cc:f0:1a:f2:5b:06:
93:28:da:31:92:c1:c2:b3:2f:10:64:bb:1b:8a:b2:b3:dd:6a:
70:81:07:23:74:b3:10:75:80:bf:d6:6a:2f:2f:b0:86:56:ab:
70:4d:b9:32:60:fd:bd:6b:62:be:b1:c4:23:12:e1:30:4a:82:
83:5a:ca:79:14:2f:9e:af:43:61:01:13:2f:53:3a:52:b5:5e:
b7:30:43:40:be:fd:cc:ba:b9:a9:b6:d4:56:83:ea:b7:2b:df:
92:e6:3a:a7:49:eb:04:b2:35:aa:1e:12:98:45:5e:29:32:3e:
ac:72:83:0f:72:10:7b:18:97:99:2d:93:47:18:31:a0:dc:13:
80:21:9c:90:e9:6e:45:59:36:06:3f:12:ac:10:48:cc:f4:86:
db:66:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:02:56 2025 by rpki-client