Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: nxbF/IIk35C5juDUzp2KjMIfFTDGnpKALzJ4WnY0kpI=
Subject key identifier: 1F:48:E0:D1:32:00:1D:50:19:DD:97:9E:5A:14:9D:09:80:A0:20:08
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 01993500839AA9BD06813D9D7BF22E0B49D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 143A
Signing time: Wed 10 Sep 2025 19:00:49 +0000
Manifest this update: Wed 10 Sep 2025 19:00:49 +0000
Manifest next update: Thu 11 Sep 2025 19:00:49 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: BDkjzMBJddJktVRk7/dEAzOuhSHM4cmCp9ckOvqZqQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:83:9a:a9:bd:06:81:3d:9d:7b:f2:2e:0b:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Sep 10 19:00:49 2025 GMT
Not After : Sep 11 19:00:49 2025 GMT
Subject: CN=1f48e0d132001d5019dd979e5a149d0980a02008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:3f:0e:f9:5c:15:86:6f:a6:99:08:03:d6:
2e:23:fa:ad:91:2b:58:95:c9:4d:43:cc:bc:a8:0c:
5e:8d:33:5f:69:9f:2b:c9:69:35:e6:4b:17:6d:d6:
47:bd:14:fa:03:ac:a2:7e:02:7d:5c:56:35:33:ab:
32:86:95:b8:36:71:b7:bc:d7:64:6d:6a:80:4a:6c:
1b:24:cb:24:20:64:44:a8:33:1a:10:6f:b9:76:68:
45:3f:e4:ba:2c:63:f7:74:13:4c:d5:c3:4a:38:32:
61:d9:26:6b:e2:9f:f3:e8:2a:3d:d8:20:4d:db:46:
4c:36:78:bf:51:61:84:25:6a:23:90:42:67:0e:9d:
f4:ae:39:3a:10:ea:b0:fa:b9:6d:4e:ef:5d:9f:76:
8e:56:98:f7:0b:68:ef:da:13:68:dc:89:67:2e:79:
cc:aa:30:03:26:b8:fe:f4:ed:2a:a6:c1:ff:ce:ba:
bc:14:d4:b6:65:ba:22:f4:ac:64:e4:93:94:04:66:
16:ff:58:ee:35:57:d9:8f:a6:75:53:8b:82:2b:40:
45:22:2c:25:de:98:30:d8:7d:bf:05:13:21:60:03:
17:ca:74:8c:5e:87:e3:17:61:0c:94:fc:7f:cc:1f:
92:c8:6f:c0:6d:eb:38:60:ec:0f:50:95:37:00:34:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:E0:D1:32:00:1D:50:19:DD:97:9E:5A:14:9D:09:80:A0:20:08
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:12:73:94:45:d0:8a:db:14:f7:3e:77:48:e8:22:6a:28:e7:
a4:65:ad:1e:76:03:98:a7:eb:40:ce:65:ee:c3:a5:b1:19:66:
de:07:46:25:30:b5:80:e6:7a:c1:be:32:a1:a9:31:65:a5:a8:
94:51:94:09:7d:30:37:3b:07:d8:6f:15:6b:5b:88:1f:68:61:
ae:24:84:c1:2e:a6:20:2a:cb:ff:da:f8:87:d2:6c:a2:78:78:
84:ea:f0:fa:51:ba:24:b1:6a:be:b5:cd:a2:e5:8e:cb:cb:78:
b1:54:63:79:88:41:eb:04:a1:74:3b:8e:f3:12:46:6f:e5:b5:
73:51:27:ee:09:73:5e:00:76:21:8d:eb:99:56:4b:1b:d0:0e:
f4:60:24:78:95:d7:12:35:9b:45:8f:fb:8e:14:5f:63:8c:e4:
f4:45:e7:f6:ae:7d:2e:30:ee:06:fc:c4:07:d6:78:4f:04:40:
89:fa:0d:07:23:c6:1b:ae:d9:23:43:4e:98:8b:d3:1c:92:8a:
9e:c2:73:a4:0a:95:34:ff:1d:1c:b0:46:06:41:c0:ae:7a:7d:
ca:f3:e3:73:c5:0f:c9:e3:2f:9c:06:b1:b5:b8:e8:78:d1:8d:
cf:e8:db:b4:04:f6:5f:8f:18:40:32:1d:da:ff:2b:ce:10:9b:
d6:31:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:45:04 2025 by rpki-client