Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier: oPQF7Z1g7OZ+tOsh/IUeMgl3B1Pt2zkwSENmw8Rulcc=
Subject key identifier: AF:32:42:D1:3D:FB:11:97:99:10:F1:89:CC:9E:BD:14:D6:F7:8C:67
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 019921E7382A6648AA8F31CFD24ACA090E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:25 +0000
Manifest this update: Sun 07 Sep 2025 02:00:25 +0000
Manifest next update: Mon 08 Sep 2025 02:00:25 +0000
Files and hashes: 1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: mun5d6GWInvgFVKIzUE6bJsEMULB2lICAmwSNUiIcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:38:2a:66:48:aa:8f:31:cf:d2:4a:ca:09:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Sep 7 02:00:25 2025 GMT
Not After : Sep 8 02:00:25 2025 GMT
Subject: CN=af3242d13dfb11979910f189cc9ebd14d6f78c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:31:1f:45:68:48:cc:c5:9d:e4:c6:55:32:
39:4f:43:a9:37:f7:d4:54:3e:99:d1:77:06:03:c3:
7a:ce:22:8c:0a:9b:f5:e5:34:5d:d4:1b:1e:89:12:
65:e9:4c:0f:6c:a9:83:e3:66:ed:b1:6e:55:49:56:
94:a7:0d:1b:dc:70:70:9f:ff:3b:8b:73:e3:03:81:
87:f4:be:47:3c:f9:4a:2c:68:00:78:46:8a:d5:91:
ad:db:36:60:18:d0:53:f9:63:9c:a3:e3:21:bb:9c:
39:d7:ca:94:12:a3:48:8d:9e:c2:7a:9a:41:df:c0:
83:05:be:0d:36:0e:ca:a5:f2:e8:12:09:16:f9:27:
75:ad:a9:59:a2:d4:6b:6e:93:ec:1f:0c:56:e2:da:
b7:11:17:68:d8:fb:13:99:28:77:40:45:76:8f:00:
45:45:24:fb:46:b7:3f:c1:aa:51:35:51:7c:22:8b:
ca:f1:2a:c4:41:8e:84:d0:6c:5b:a3:65:76:73:a1:
7a:8c:80:85:76:e8:af:54:38:bd:6e:17:99:1c:8d:
b2:36:1e:a3:c3:14:8c:3a:4b:c1:19:75:12:9a:5f:
34:fc:c6:90:82:7b:8b:3b:6d:93:f1:3c:09:84:c2:
3b:0f:81:24:58:af:e0:a7:aa:44:fe:94:aa:fb:92:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:42:D1:3D:FB:11:97:99:10:F1:89:CC:9E:BD:14:D6:F7:8C:67
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:7e:56:5f:6a:e8:38:0b:36:f4:3b:a9:53:fb:91:97:b7:
0f:5c:d9:f3:4b:f0:f6:bc:92:42:bb:4f:0e:1d:bc:24:13:20:
92:84:09:cc:bb:8e:28:29:25:e7:b6:98:fb:47:fe:e8:0e:58:
5c:45:81:f9:ff:6d:ec:03:e0:bb:18:67:a0:c3:3e:34:e8:de:
09:14:6d:d2:bc:d7:4f:4e:0c:9c:39:7c:7a:c8:71:c8:aa:c5:
5f:16:37:86:34:26:4e:2f:f5:94:9e:ed:52:0f:ba:b2:c6:42:
e9:ba:94:88:a8:75:84:bd:e2:63:7f:46:6a:9c:20:b6:b2:12:
c2:3d:cb:28:a5:18:ab:e7:01:e7:c5:14:d5:ba:1c:18:69:0e:
69:0d:5b:eb:b0:39:86:9d:58:68:ea:5e:bc:51:22:e8:7c:03:
fd:23:27:6d:dc:22:da:52:38:3b:70:bb:2d:94:8f:4e:6a:c6:
c8:0c:85:0e:3e:4a:71:9a:43:86:5f:cb:82:ec:1f:ed:79:20:
90:be:73:00:81:2b:f5:89:68:21:f9:df:47:20:cf:82:5d:1f:
25:81:bf:7a:a6:91:4a:58:8e:53:55:ce:b2:af:5c:d5:1c:a2:
43:dd:55:50:b8:44:f2:d5:66:a5:c7:c8:bf:6d:66:23:0f:1f:
97:bd:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:11 2025 by rpki-client