Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: x/47CAc0vzz+VyMzD2g0CCDgWSB/AYAOCgpQfBUFhLM=
Subject key identifier: 76:3C:48:51:B2:02:C1:DF:A2:F4:32:FA:A1:97:07:0D:62:A9:1D:FA
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 01992331196F44C9EEDC035469313CAF4EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 0643
Signing time: Sun 07 Sep 2025 08:00:44 +0000
Manifest this update: Sun 07 Sep 2025 08:00:44 +0000
Manifest next update: Mon 08 Sep 2025 08:00:44 +0000
Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=)
2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: uqaIcmO94U/zaljAg//EALDsKInTVOA8k9nBBHsE248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:19:6f:44:c9:ee:dc:03:54:69:31:3c:af:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Sep 7 08:00:44 2025 GMT
Not After : Sep 8 08:00:44 2025 GMT
Subject: CN=763c4851b202c1dfa2f432faa197070d62a91dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:77:56:b4:9c:0b:fe:a9:91:a3:4b:07:73:72:
49:55:93:17:cf:9c:0d:f9:7f:f7:0f:91:b3:f0:90:
e9:e5:db:19:eb:88:1d:a3:9a:1c:7c:52:87:4b:b5:
02:de:89:21:03:79:5b:34:5d:79:65:b0:29:0f:41:
4c:a6:68:51:48:97:57:29:be:db:12:4c:f6:8a:72:
2f:8e:65:1a:a7:0b:1b:bb:5a:7a:cb:22:7f:64:55:
d3:19:d3:f0:ed:17:51:31:09:dd:db:ed:c3:84:b2:
a5:f5:dc:0b:3e:a7:39:93:3c:fb:35:45:3a:47:41:
56:07:88:7a:1a:b5:d6:af:99:40:69:0d:24:dc:d7:
31:4c:54:8c:27:67:ee:47:11:08:fc:a3:78:65:d4:
eb:ab:46:a5:52:6d:4f:7f:da:33:5f:18:c2:0f:93:
bb:5e:0c:53:b4:33:b0:62:1c:c4:7f:80:96:4d:d2:
f7:c0:bb:a2:80:de:9b:97:d1:27:9e:5f:f5:42:01:
02:1e:ce:f6:91:b3:48:95:51:5f:c3:a6:5d:8c:7f:
71:20:50:f6:78:f1:86:fd:c0:da:cc:5e:1d:43:91:
b7:8f:80:d2:bf:3d:43:44:99:6d:55:2f:14:ac:45:
82:02:8f:9b:ab:f8:55:03:a4:99:67:33:d4:d5:0d:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:48:51:B2:02:C1:DF:A2:F4:32:FA:A1:97:07:0D:62:A9:1D:FA
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3f:43:1c:78:34:31:fd:1f:14:9a:bb:72:be:80:72:58:6c:
3a:16:79:1a:be:5c:ad:13:76:f1:7c:9b:a7:02:18:d0:b1:88:
9e:35:2a:9b:ea:54:54:ae:79:13:32:29:2c:78:2e:23:b2:d1:
7b:6d:34:2d:7d:97:97:33:68:1e:73:56:a1:ac:e6:8d:31:d0:
a1:80:9f:bf:34:f1:2b:1d:fa:88:99:1f:fe:d7:27:36:62:b1:
f3:2d:31:3f:c3:cd:63:42:ae:2f:da:1c:4c:aa:ec:cc:75:a8:
7b:10:5a:6f:48:db:c6:b0:a9:c4:1d:0b:4d:cb:1f:94:22:d9:
18:77:20:c5:df:0b:e7:01:bf:79:4e:dc:f2:45:d4:5f:66:26:
e8:2e:fb:17:61:12:7f:cd:4e:72:d7:b6:18:52:44:30:c2:cf:
c0:0c:8c:69:cc:e2:8b:53:ad:f7:b0:56:30:53:37:fc:e3:1f:
7a:e5:be:3f:08:62:0a:94:c2:db:d5:f0:35:f3:eb:d5:88:79:
02:6d:a1:df:31:05:58:93:18:0c:eb:97:f4:fe:22:5f:59:2a:
7f:b0:8c:e3:05:56:d1:e7:6b:79:23:e3:af:03:c2:14:2e:d1:
69:2a:21:c1:ec:05:58:0d:a2:99:22:80:38:64:56:31:54:a7:
e4:eb:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:11 2025 by rpki-client