Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: DVIDlcpK412Ugxg+EhA9CFyrmGjsuy6e0i+uSHwhtBE=
Subject key identifier: 68:A4:59:9A:75:F1:F4:20:83:44:97:90:A1:30:F4:00:49:48:FE:B8
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0199239FB239A0443233E45EBB4A5E55DE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 10:01:32 +0000
Manifest this update: Sun 07 Sep 2025 10:01:32 +0000
Manifest next update: Mon 08 Sep 2025 10:01:32 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: 2b7aCjjpfmSMyq2b7zilxqJ6LvQ0LGCdxF7+Jhp/iRw=)
2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b2:39:a0:44:32:33:e4:5e:bb:4a:5e:55:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Sep 7 10:01:32 2025 GMT
Not After : Sep 8 10:01:32 2025 GMT
Subject: CN=68a4599a75f1f42083449790a130f4004948feb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:1e:53:f7:5e:fe:23:3e:4c:ba:80:c1:8a:
be:90:e4:a7:ba:63:a4:65:e5:6e:25:db:94:b1:f3:
3c:da:bd:ff:53:04:c2:33:7d:0c:c3:8e:6f:21:4d:
8c:45:33:6a:10:52:25:5c:42:4c:7c:c1:da:8d:96:
1b:1c:eb:f5:c4:77:d5:90:5f:6b:43:8e:4e:66:21:
e5:66:ad:76:c5:88:61:a1:3a:d8:eb:2b:76:77:f9:
b5:da:0d:a8:54:6a:a4:06:01:29:99:80:c2:d8:65:
b7:00:6f:93:6a:59:32:21:89:65:6f:c7:b5:49:07:
c1:11:7b:e3:69:e4:cf:f8:16:1a:a5:81:aa:59:a5:
ea:9d:80:6e:3e:dc:3d:db:b4:b9:00:42:34:28:36:
42:6f:15:07:e0:c1:1a:45:ab:90:89:40:63:24:46:
86:6c:d2:7d:ff:a1:18:eb:5d:94:a3:cc:0e:54:8e:
dd:1d:1c:fc:7b:52:79:bf:fa:1c:28:a4:e4:78:c6:
b4:e4:a8:82:08:cf:a7:c8:dd:c4:a7:50:e3:65:3c:
62:fa:bd:e7:8f:13:33:8a:72:7b:a2:9f:ab:66:0b:
09:c2:55:42:45:76:28:50:ac:42:f9:58:03:6a:35:
72:ba:fa:18:ed:b1:c8:53:40:8a:60:b2:b7:fd:07:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:59:9A:75:F1:F4:20:83:44:97:90:A1:30:F4:00:49:48:FE:B8
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:45:e7:a5:f0:02:ef:93:08:40:51:89:ae:ae:7e:4c:16:0e:
a1:a3:fa:81:8d:3c:99:d5:28:af:9e:8b:d2:b7:1a:e4:70:cb:
10:c9:1c:52:a0:bb:38:cd:b6:ad:0e:19:2f:fa:3d:66:ea:18:
37:c3:51:1a:df:de:10:11:bb:13:a0:9b:f4:3a:14:98:65:93:
ea:0d:95:f5:c9:da:65:0e:20:a3:a2:84:70:18:3f:53:45:cb:
cd:07:2c:d1:a7:b3:b4:8d:fc:1d:be:9e:27:72:75:3b:fa:23:
31:01:49:b9:04:5b:25:0d:b5:c0:f9:cf:48:08:67:df:92:5a:
40:55:ac:b4:bc:b6:44:f4:66:8c:5d:30:b9:91:cd:a5:c5:88:
d9:81:96:b2:6f:61:2d:df:35:e4:a3:22:82:73:cc:ac:e6:c9:
a6:be:12:93:20:dc:a1:fc:33:54:af:1f:74:eb:2c:fc:16:3e:
66:09:93:6c:fa:e9:e7:39:6c:54:9f:da:11:9a:c5:86:d1:dc:
d4:6f:9d:48:26:ed:fa:7a:cd:59:85:36:a2:b9:f6:2b:a3:bc:
1e:39:be:03:f2:ba:ae:36:ad:be:58:9f:92:70:61:5e:90:2e:
14:63:62:6d:23:d4:e6:20:f1:0e:f6:87:a4:15:84:42:be:5c:
08:f0:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client