Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: khY8xWFq6ByPT65EQ0jes8Bdz04SCqYZgSDzlU5a9Tw=
Subject key identifier: 1B:DD:9F:AF:4C:F9:B4:FE:C3:6E:61:90:5D:48:4D:80:59:1A:90:5C
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0199239FE02A35D7FA2D48CAD8B55ECA11C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:44 +0000
Manifest this update: Sun 07 Sep 2025 10:01:44 +0000
Manifest next update: Mon 08 Sep 2025 10:01:44 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: rzfkqsIfGQaHx0paWaLD9VM4I9lgjZyK7SeuF2CXXpw=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e0:2a:35:d7:fa:2d:48:ca:d8:b5:5e:ca:11:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Sep 7 10:01:44 2025 GMT
Not After : Sep 8 10:01:44 2025 GMT
Subject: CN=1bdd9faf4cf9b4fec36e61905d484d80591a905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:4c:fc:71:3d:92:3e:f9:40:2e:3c:a3:5f:
0b:f4:38:7d:53:bd:b6:cc:d3:87:ac:26:53:9e:bf:
99:17:7b:79:27:30:b1:41:22:22:18:67:77:cc:ea:
85:d9:fd:0c:2c:ce:9d:ae:45:15:66:c0:3a:8e:de:
45:e2:69:f8:f0:d4:43:b2:14:67:0e:fa:bf:78:6b:
3f:8d:db:25:1e:8f:f1:9d:97:70:08:f4:ad:3a:4f:
25:86:85:9c:41:3a:97:60:e5:6a:bc:e2:71:9d:d5:
94:0c:ca:4b:a3:85:57:d9:b3:f2:48:fc:81:71:9d:
8c:58:03:6b:7c:09:8a:9f:8c:95:4c:5f:07:cf:f0:
84:87:78:9e:11:fc:f7:ca:4c:31:d9:08:e7:f9:b9:
6a:bd:7c:59:91:45:6c:53:3a:64:2c:81:a4:a9:40:
5e:4c:b2:c2:e5:fc:27:a0:61:57:85:97:a0:40:f9:
f5:b5:08:02:1f:e2:78:1e:04:27:bd:ec:c7:2c:a7:
a4:3f:e1:97:48:e6:b1:a5:00:af:5c:ee:e9:2f:60:
9f:e7:82:47:69:34:d0:f3:0c:b6:e4:48:66:c1:3e:
88:5a:fa:d1:c4:e9:b3:79:ee:ee:dd:17:9c:ae:31:
82:6e:28:9a:7b:b8:bb:c6:1c:1a:9f:a9:a7:4e:b5:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:9F:AF:4C:F9:B4:FE:C3:6E:61:90:5D:48:4D:80:59:1A:90:5C
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:e0:c1:53:5b:90:58:0d:eb:9e:e1:5b:87:8d:f6:2d:71:
4a:01:4b:b5:c7:50:70:ed:79:1e:08:6a:b7:7b:16:70:e1:25:
14:b2:b8:b8:cd:70:f1:03:6e:75:07:03:45:49:fb:79:86:bc:
df:37:10:0c:b2:26:e9:fb:51:cd:78:bc:81:05:48:3a:46:95:
da:30:2e:20:64:ad:8a:30:c3:19:5e:23:e1:37:1a:4e:90:76:
d6:b5:3a:95:48:34:b9:9b:7f:d1:ed:b5:27:34:b5:ce:36:81:
e7:88:c3:22:31:d3:64:f8:fc:84:2f:13:08:73:76:4c:36:19:
8b:05:82:73:24:98:3b:93:7d:4c:11:86:23:06:2e:be:04:2e:
65:57:f7:0a:40:a6:81:19:bc:27:b6:57:11:72:6c:89:7f:9b:
ba:15:f7:0d:31:fe:b0:25:50:1b:9c:9c:c4:4e:ac:10:9f:72:
e8:1d:d7:92:87:8a:5a:6d:2a:8b:64:ee:4e:e8:93:43:bc:96:
7c:87:f8:fa:34:b5:cf:62:8d:c4:5e:53:b5:2b:7f:c1:be:13:
4b:5e:87:ba:14:9f:0b:60:11:a7:35:67:bf:2c:ac:b3:eb:7b:
7f:0a:8d:b4:6f:bf:2a:86:61:14:69:d8:73:53:6f:fb:dd:de:
4c:ea:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:17 2025 by rpki-client