Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: VpS0lLwRPMUkJhW053uOrap1xi8RNgARIOYYLmqon0A=
Subject key identifier: 82:00:73:0D:66:80:79:F5:83:DD:E6:98:C6:72:DC:1F:7C:B9:8C:BE
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019923D5C84926ED5FE426D0D927E9F0C844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 11:00:36 +0000
Manifest this update: Sun 07 Sep 2025 11:00:36 +0000
Manifest next update: Mon 08 Sep 2025 11:00:36 +0000
Files and hashes: 1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: UTBFcp2EXoUNu9ER5GD1+9LULe7gQsfzTV/dIPq7grI=)
3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c8:49:26:ed:5f:e4:26:d0:d9:27:e9:f0:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Sep 7 11:00:36 2025 GMT
Not After : Sep 8 11:00:36 2025 GMT
Subject: CN=8200730d668079f583dde698c672dc1f7cb98cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:3c:cd:8e:b2:ae:3e:a4:aa:e5:f8:5e:47:
32:74:76:dd:7f:0c:a2:52:f5:9f:1d:61:c0:f5:15:
38:08:b3:d4:84:4d:e7:ab:a3:91:97:44:43:f1:b9:
e8:6d:7f:4f:c8:4e:db:6e:cd:9b:cb:67:d4:a6:16:
b9:c7:1c:3c:1c:68:69:37:d9:ad:e4:5f:1d:29:4c:
f2:8a:ee:88:40:d5:ea:6f:a5:3a:6e:4f:17:5b:0f:
66:d7:37:47:6c:bc:6b:6d:26:e4:0c:c0:2a:9b:46:
f8:54:45:a0:a4:ca:34:a9:37:8d:d6:af:d1:93:9d:
f1:6c:07:8b:b0:3c:e4:7d:3e:86:7c:a7:e5:87:a4:
5b:f0:cd:46:3a:4a:19:d1:1b:4f:93:fc:75:74:c3:
0f:9f:92:09:9b:04:d5:8d:e7:50:6a:5f:97:db:b4:
e8:b5:52:b5:52:ed:fc:7d:df:47:87:db:73:3c:bb:
f6:b4:11:d6:1f:28:34:e4:fd:e4:6b:01:0d:de:20:
ce:71:64:67:04:23:73:f7:a1:9a:2b:09:16:62:e2:
01:71:f8:fd:ce:07:a9:d7:93:62:3a:b7:f4:a4:03:
fb:ba:34:4d:06:6d:d8:4d:1c:5f:f7:bf:01:90:68:
6b:f6:c9:7e:8b:22:72:26:74:88:cc:08:9f:a8:7b:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:73:0D:66:80:79:F5:83:DD:E6:98:C6:72:DC:1F:7C:B9:8C:BE
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:8b:b9:e0:54:7e:d3:69:48:30:94:a1:62:4c:b6:ac:89:
57:cc:6d:44:68:ab:a3:84:a3:d7:8f:cf:02:e3:57:28:0c:dd:
43:a6:8a:67:02:41:f7:6b:e6:05:be:08:0a:30:c1:bc:09:77:
9b:88:58:a4:59:13:a2:44:ce:cc:7c:69:2b:48:08:31:a2:cc:
c9:cb:33:3e:82:06:78:52:36:dc:a1:70:26:d7:93:2f:42:46:
14:d4:96:73:e6:15:40:ab:33:15:fa:29:e6:77:aa:e9:91:ee:
4e:43:cb:22:57:2c:a0:04:55:88:ad:c5:c1:8f:3e:b9:57:87:
80:31:08:35:eb:e4:e7:c6:ac:5e:35:0f:49:46:28:57:c9:f1:
7b:62:28:b3:b4:b0:7f:27:88:c1:f3:75:9c:e5:c2:6f:f7:2c:
bb:bd:ae:87:c7:43:84:6c:4a:40:f7:65:9b:4d:b9:04:0c:ba:
e1:d0:30:3f:b0:5a:09:bd:01:5d:ce:95:f4:92:98:fe:8f:40:
0d:b6:8a:0c:76:ae:be:00:cf:1f:56:f8:aa:61:06:de:b4:82:
5e:80:58:75:50:40:88:a6:2b:77:51:66:b5:fd:cd:77:6d:89:
75:b0:f1:85:54:25:08:da:18:e0:d6:52:18:6f:b2:09:77:db:
d3:45:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:52 2025 by rpki-client