Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: FIlTYMm4PoCX1jIRBc9S0rsNTfdhWchDb+PMnQIvv/Y=
Subject key identifier: 75:4C:2B:EE:3C:AD:AC:5A:2D:05:62:6F:BE:D0:A5:FD:CD:7D:85:19
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019922FAB6C9B56BBBD9492B9C82066AD88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0E0F
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: 7+hT1vSyZvHhjrd485oqJOffSBySDrgdDLHUITebELs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b6:c9:b5:6b:bb:d9:49:2b:9c:82:06:6a:d8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=754c2bee3cadac5a2d05626fbed0a5fdcd7d8519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:80:71:82:1e:e9:98:48:04:2c:7a:16:ff:
6a:bf:78:fb:97:9b:96:bc:2b:89:fa:46:bd:69:a0:
96:1d:43:a3:6d:98:ba:58:b4:e5:2c:78:93:56:87:
be:23:42:4a:b2:16:64:61:97:5a:a5:ac:ec:a0:32:
2f:1b:7c:0c:77:d2:c2:2d:dd:1e:f9:48:da:ff:5c:
aa:47:5b:1f:f6:2f:3e:7a:72:a3:a9:32:1e:7a:2e:
36:6c:ef:8f:df:04:9e:a3:db:53:0a:08:6a:eb:1b:
17:8c:77:c4:19:ff:7b:64:43:b2:2e:0b:cb:ef:b0:
d2:48:6d:43:45:a5:4d:d7:16:dc:8c:d4:38:9a:37:
22:9b:13:b4:e7:41:4e:f5:cf:d6:bf:3f:bf:4a:49:
63:6e:f3:ab:3e:3b:74:49:ab:25:14:ec:b2:43:93:
59:b8:a8:5e:26:ed:4c:ce:0a:32:ab:31:c4:28:e8:
46:37:2e:b9:5b:53:45:97:8c:7a:95:06:6f:08:e3:
3f:6a:20:45:69:32:48:f4:63:ad:34:a3:58:05:a6:
f6:b6:d9:79:6d:b6:14:7b:93:29:b4:60:08:9e:35:
88:b3:07:5c:df:3c:69:d1:49:4f:68:a4:c5:9d:bf:
c1:64:7a:cf:bc:90:4c:fd:f8:02:a5:e4:6f:f9:73:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4C:2B:EE:3C:AD:AC:5A:2D:05:62:6F:BE:D0:A5:FD:CD:7D:85:19
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:b4:aa:2c:b4:a7:08:48:ea:11:f1:4e:ce:a8:82:1a:83:
a6:9c:85:0a:b5:72:7b:82:c3:f5:bf:de:74:24:2a:16:e2:b8:
02:6e:cd:08:2a:b9:1a:b6:b2:1c:53:a8:15:b1:d5:e0:87:de:
45:b3:7f:a8:5b:8c:76:58:0d:35:61:e0:ca:7d:d6:8b:34:40:
32:8b:bd:ec:2a:ff:85:6e:94:60:c9:16:c4:f2:c2:41:ae:9b:
82:f7:b4:92:c6:76:b1:96:38:e9:67:6a:b9:4e:b0:76:c6:a5:
a3:b5:81:24:61:4c:69:1d:f3:bc:b1:c2:b6:48:39:ed:64:9a:
a2:73:2a:89:ee:30:dc:11:2b:d3:7d:ef:1a:51:63:7c:4b:f2:
6f:80:5e:a3:25:86:0d:2e:b4:ac:45:13:bc:c3:b0:70:a6:05:
fc:e5:42:4c:14:f3:90:87:84:e7:17:a0:51:c2:94:c4:9d:ab:
a3:f8:64:55:34:11:05:0c:be:b2:36:8b:95:e0:18:3a:61:89:
d1:fc:96:b3:49:aa:f5:9f:82:9a:a3:0d:e2:f3:15:71:cb:5f:
00:4f:d0:b9:70:15:57:8d:cf:c2:e7:1f:c0:92:38:ca:1b:4f:
6b:1d:e2:00:c8:54:cc:07:b0:46:89:3a:4f:f7:20:32:57:69:
49:6d:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:01 2025 by rpki-client