Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: Vo7XZBZAT3qQfV5XGVWU12SOh+ZxIIdGl1fcnchHdXw=
Subject key identifier: B1:1F:B1:C2:E9:B1:91:D4:A7:EC:66:70:8B:E9:06:E7:8D:35:1F:79
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 019923D5D9DD0B74C60393151CF2EE2738D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:41 +0000
Manifest this update: Sun 07 Sep 2025 11:00:41 +0000
Manifest next update: Mon 08 Sep 2025 11:00:41 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: seGzka6SQXjPfG2S3BdUzedZlFAdEuaGPGJagxq6Pnw=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:d9:dd:0b:74:c6:03:93:15:1c:f2:ee:27:38:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Sep 7 11:00:41 2025 GMT
Not After : Sep 8 11:00:41 2025 GMT
Subject: CN=b11fb1c2e9b191d4a7ec66708be906e78d351f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:56:58:0d:f9:81:b3:74:b1:89:17:0b:7a:
f1:81:85:91:fa:25:b1:d4:e3:6c:9f:2d:d9:38:7a:
c7:ff:16:d8:1f:4e:37:e3:87:2b:c1:89:ff:c0:f6:
86:4a:89:20:c3:4d:11:c1:09:f5:57:a5:d3:9b:ab:
8b:ef:da:6a:9a:d5:3c:82:1e:d3:31:53:e1:49:34:
1d:78:2c:61:ce:d3:57:78:b0:8d:d4:35:e7:49:3c:
52:c5:0e:db:a0:82:ba:b6:99:15:b0:8d:4a:98:82:
b1:5c:fa:f0:5a:ea:ba:ca:cf:92:3d:51:35:d4:ef:
f2:69:52:f0:e0:12:e6:ae:f9:94:70:e2:62:84:50:
39:29:6e:1c:fc:c8:db:0e:9f:f7:37:e9:44:01:e8:
ae:46:61:ff:7a:07:e3:5b:e8:56:13:02:17:fe:60:
9c:be:fc:a5:44:da:b4:69:3f:e5:f5:b5:f9:b4:48:
bb:ad:48:27:89:f6:cf:cb:6e:87:8a:c7:2c:57:04:
6c:6b:20:5f:40:8a:d5:15:2a:27:7a:49:93:e7:ca:
10:7e:c9:7c:29:3a:31:c1:ff:60:ad:97:17:57:a3:
b5:60:fd:f5:df:1e:8a:d7:69:69:23:04:ee:44:52:
14:51:27:04:c5:22:ff:8d:95:5b:66:de:02:8b:d8:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:B1:C2:E9:B1:91:D4:A7:EC:66:70:8B:E9:06:E7:8D:35:1F:79
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:a9:60:92:0b:f5:da:f8:6c:74:d5:c0:99:6f:ed:b0:96:
2f:3e:0f:d2:a2:9f:4e:9c:59:7a:c6:14:c1:63:e3:4c:41:69:
ac:ed:89:d5:40:dd:59:ab:67:27:97:e6:94:63:7b:28:d5:ee:
cf:04:7e:7d:2b:68:8f:ca:02:8e:e4:71:a6:e4:c1:f2:c6:5b:
fd:e1:b3:4d:8e:55:ff:74:c1:a4:1f:61:b3:59:ed:f6:c8:01:
33:7a:91:3e:5f:40:a6:d3:20:a3:ef:52:76:26:74:c9:70:08:
04:57:48:d6:95:30:16:8f:b9:66:d4:dc:22:fc:5b:f9:96:e5:
4c:93:52:1b:8d:95:47:70:01:cc:4f:1a:ff:cc:ee:14:7f:bf:
06:d3:6b:31:fe:cd:35:f0:53:aa:ea:1f:d1:95:1f:ec:9a:c6:
3b:53:4a:b3:47:8a:21:6c:eb:9c:45:7a:3f:ea:89:4e:ba:43:
4a:a4:38:9e:75:39:fd:60:ea:d5:cb:d7:e2:0a:eb:d6:39:52:
e5:b5:cb:62:d0:bd:17:60:7b:f1:d1:8c:b7:1f:dc:c1:cb:96:
ba:09:34:27:30:86:de:b0:b0:7b:d8:df:13:41:60:53:ec:a8:
3f:1e:df:8f:ac:46:a5:6f:a8:e6:29:41:a1:3c:f3:e2:b8:42:
e5:a2:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:43 2025 by rpki-client