Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: tL8PfzI59vTeT800t1yjOwb0tuLTC3L2S52ox4D4wXw=
Subject key identifier: 79:54:1E:AC:42:2B:D2:D1:7A:A1:66:DC:29:5D:17:1A:FD:05:25:C9
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019935DC883BA7F1DC13F4BD85C23B914600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 146B
Signing time: Wed 10 Sep 2025 23:01:09 +0000
Manifest this update: Wed 10 Sep 2025 23:01:09 +0000
Manifest next update: Thu 11 Sep 2025 23:01:09 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: qj25JkHKhSilulD2SqSVCmdYRM0c8enaDcnuxUC18wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:88:3b:a7:f1:dc:13:f4:bd:85:c2:3b:91:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Sep 10 23:01:09 2025 GMT
Not After : Sep 11 23:01:09 2025 GMT
Subject: CN=79541eac422bd2d17aa166dc295d171afd0525c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:b9:61:ba:3f:a4:86:14:59:92:38:24:82:
5d:2b:2e:af:97:0f:c0:4b:f8:18:1b:36:14:85:de:
c6:a2:e9:30:ff:af:45:ed:69:5d:f6:bf:2e:7a:b4:
f3:0f:57:f6:3b:af:e1:fe:5f:6a:d9:5f:ea:fa:b0:
3d:d1:6c:e9:ef:6b:77:55:ed:e0:ba:cb:68:f5:d5:
27:56:2d:d1:c1:94:10:f6:68:40:34:f5:58:7c:1e:
d0:0a:4f:8d:6a:a4:63:b0:48:4f:fb:17:73:c7:a0:
1b:9c:c4:24:87:7c:35:06:75:90:66:7e:a8:f2:59:
fc:a3:58:85:1c:d8:37:88:ee:a6:8c:7d:47:8b:83:
d0:6f:9a:24:77:69:9e:42:34:97:b1:88:61:a2:24:
b5:03:30:51:c5:0a:c8:06:59:ca:dc:d0:dd:48:1a:
80:b6:fe:e0:55:28:3d:73:49:21:59:27:50:5c:37:
94:d2:f9:71:2b:46:11:b7:4e:1c:6b:90:61:0a:6b:
12:3c:69:34:1c:b5:5a:0a:49:17:77:e3:c8:3c:82:
f6:9a:1c:2c:de:49:5c:54:ce:35:ab:23:14:72:bf:
02:3a:5a:81:c5:cd:9e:8a:f0:dc:20:b2:7e:ff:80:
c4:76:af:40:54:6e:de:06:c1:73:0b:41:f0:6f:b6:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:1E:AC:42:2B:D2:D1:7A:A1:66:DC:29:5D:17:1A:FD:05:25:C9
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:15:7f:57:d4:fd:22:5f:31:43:05:0a:5b:fa:12:e1:18:e2:
8d:eb:9c:cc:a6:dd:b8:86:66:f7:1c:5d:a8:59:6d:c4:50:04:
97:7e:9a:fb:64:cf:f7:59:d7:c9:19:61:c4:3f:11:d1:c1:e3:
5d:51:94:d0:24:26:97:38:44:f4:64:ad:c7:90:79:96:ca:99:
d8:4b:20:d3:fa:30:54:46:78:a7:55:c0:17:ca:00:9a:2f:b3:
e7:a2:be:38:4c:9f:5d:7a:a8:b0:c0:be:fb:9e:7d:e3:0b:f4:
45:e2:69:f7:9f:e8:18:41:0a:bf:d0:32:bf:7b:81:ab:f4:31:
d5:05:7c:bd:76:20:07:46:53:49:64:e5:b6:0c:fb:a4:12:13:
c5:26:94:7e:b8:76:bf:38:a2:ca:43:8c:db:20:e9:47:04:66:
17:5f:9e:7e:79:70:26:b2:5b:4b:c0:8c:cd:54:86:d4:6f:d3:
d7:aa:ee:a3:6a:93:8a:07:ac:de:b4:ac:6e:aa:1c:d2:9b:65:
16:90:5c:5d:db:97:da:25:91:b5:fe:c1:52:f0:0b:e3:2b:74:
30:87:e2:45:ea:10:fa:37:e7:f1:d9:66:fb:bb:49:21:0b:42:
04:42:67:65:bb:20:36:09:57:21:93:5f:c5:38:cb:b6:5a:c4:
c3:4f:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:59:11 2025 by rpki-client