Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: POrs8W5mdCpBwEQLjA91kQLae4DkNY+BOQ+PE+CLINo=
Subject key identifier: DA:60:EB:22:D1:D7:25:6B:15:91:43:1E:84:78:AD:5E:1C:A3:87:EF
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 01992932EDEA9EDCFF1E7B58931FF5002AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0D18
Signing time: Mon 08 Sep 2025 12:00:27 +0000
Manifest this update: Mon 08 Sep 2025 12:00:27 +0000
Manifest next update: Tue 09 Sep 2025 12:00:27 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: DkGqUJLLN6bJzaGylyb9FHr8o2RijKFgnB8f8iGxy9c=)
2: negj_8qldSprHD3F1eQcTwkIJOc.roa (hash: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:32:ed:ea:9e:dc:ff:1e:7b:58:93:1f:f5:00:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Sep 8 12:00:27 2025 GMT
Not After : Sep 9 12:00:27 2025 GMT
Subject: CN=da60eb22d1d7256b1591431e8478ad5e1ca387ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:8e:62:11:4e:4b:cc:90:e3:09:a6:d0:d6:
33:d0:c2:25:3c:74:37:59:64:8a:6e:73:87:3f:1c:
e2:5e:2f:96:a6:cb:00:85:59:51:aa:a5:18:65:eb:
ad:31:93:b9:59:06:aa:df:1a:c5:43:cf:b9:3e:4e:
24:57:7f:5e:74:bc:5e:cc:e5:55:b5:40:fd:34:26:
70:40:85:31:59:0d:63:91:69:7c:cb:f2:a7:b8:8a:
e9:20:7b:4d:2f:d4:fd:b3:51:f5:75:0d:83:ab:55:
c6:a6:69:37:05:a2:70:12:e9:e5:6d:7e:25:f8:39:
40:6f:be:44:dc:9d:85:2d:e2:ee:ca:6c:63:c0:99:
f9:91:16:68:90:a9:61:f0:e3:d0:d0:96:8b:79:6b:
f6:a8:15:be:22:bd:f7:10:e0:46:ad:b0:2b:45:8d:
0a:12:ba:db:c1:88:d3:b5:81:a8:94:10:c2:06:dd:
fe:68:f4:2f:d0:9b:69:7d:01:ba:3e:db:eb:cd:e5:
9e:de:36:f6:72:4b:14:65:0f:6c:21:ee:76:7b:dd:
a3:03:97:e6:6c:b9:cc:89:a1:a7:e7:50:39:6c:5a:
6e:a6:06:02:d6:b9:78:68:18:52:46:e4:68:4c:f5:
85:74:a3:88:1b:98:41:20:ae:c7:cd:67:78:cf:89:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:EB:22:D1:D7:25:6B:15:91:43:1E:84:78:AD:5E:1C:A3:87:EF
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b6:d1:13:e1:69:32:a1:48:5e:5f:96:5a:94:95:71:18:3f:
19:c8:1e:6a:c8:f9:e9:da:9c:34:64:4d:3e:1b:85:52:bb:36:
2f:95:c9:30:74:58:76:51:c3:6b:b1:97:39:a5:d0:6c:ee:47:
23:13:4d:f0:bd:6d:d5:e3:c9:58:76:51:23:ef:c5:15:62:00:
a7:14:b1:a2:c2:7d:9c:e6:f1:40:18:32:3f:25:5d:2f:b1:d3:
60:3e:7d:c8:40:6d:81:49:bb:89:f9:b2:a2:84:af:95:e7:2e:
bc:b0:71:25:99:b2:24:43:93:ab:c0:26:73:ed:12:68:21:bc:
5b:52:8f:d4:8e:6f:2a:14:18:be:9a:2c:cb:cb:53:6d:ad:09:
a9:fd:ed:53:27:30:d0:33:42:ba:0a:68:55:0e:b1:83:17:64:
04:16:95:11:0f:9f:2c:8e:69:07:d6:ac:72:cb:70:04:10:de:
9d:28:89:ef:5e:96:3f:0f:75:90:f6:c6:5a:4f:7b:6c:7a:06:
16:a0:b9:62:67:c6:26:d4:d5:2c:7e:05:a9:3f:1b:e2:ce:2c:
58:bc:96:ee:61:f8:61:b8:42:58:72:0f:e7:d3:af:67:ee:05:
0f:1d:16:86:22:34:95:18:66:03:84:50:69:c0:5b:f6:e2:a8:
e3:27:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:08:46 2025 by rpki-client