Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: qVzGBCNnxNCNLiA1iSkZ1TK6uWPpbVatxGAvE7cDRcY=
Subject key identifier: FA:AB:D3:2F:13:8F:49:34:F3:DB:90:FC:0F:6D:59:29:FB:CB:A5:24
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0199179AEA99043696900BA6B21917506A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1135
Signing time: Fri 05 Sep 2025 02:00:52 +0000
Manifest this update: Fri 05 Sep 2025 02:00:52 +0000
Manifest next update: Sat 06 Sep 2025 02:00:52 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: j+X2ExATmm3ykGzXcUcaIZBZZqbfTLlahlO3EBSRHWc=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:ea:99:04:36:96:90:0b:a6:b2:19:17:50:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Sep 5 02:00:52 2025 GMT
Not After : Sep 6 02:00:52 2025 GMT
Subject: CN=faabd32f138f4934f3db90fc0f6d5929fbcba524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:0f:ca:4a:32:81:37:dd:0d:8d:d6:e9:5d:
23:fb:41:2d:0e:73:47:99:da:68:65:b6:7b:2b:4d:
17:af:42:66:a0:08:99:e1:fe:04:c8:1b:36:95:91:
1a:40:4e:50:e0:cf:13:ba:84:cd:de:05:59:78:09:
45:74:b2:dd:3a:8c:bc:f7:c3:8a:4b:fc:e7:6e:69:
5e:5e:2b:73:1d:8d:a5:4c:74:65:13:38:24:33:10:
0e:27:f1:4c:dc:91:15:9b:e6:78:b0:36:53:47:ff:
be:77:a4:e1:7a:08:9b:45:fb:17:5a:d9:6c:1f:01:
dc:35:b3:05:71:73:25:46:07:9a:1d:a0:7f:cc:6d:
29:56:9a:eb:9c:f4:b0:2d:53:59:d6:bd:a4:46:99:
bb:ea:ee:83:b0:14:8d:b6:1b:80:b8:82:ee:1a:31:
98:3f:72:12:b8:e1:ed:60:e8:ed:67:b1:72:07:09:
bf:33:0d:29:8d:ac:de:4b:f6:e0:93:56:71:c9:e0:
0e:90:81:5f:16:38:22:b2:af:f2:e2:b5:ec:0b:7f:
66:33:8b:3f:ed:e2:17:2d:08:bd:7e:b4:9e:0f:e8:
97:0c:b5:d5:72:3c:9a:5c:16:26:f8:5d:ac:ce:15:
f0:6a:b1:2d:cd:ef:dc:da:31:bd:46:6d:e4:c5:76:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:D3:2F:13:8F:49:34:F3:DB:90:FC:0F:6D:59:29:FB:CB:A5:24
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c6:71:c8:ea:fe:68:cf:e3:af:8f:0e:3c:ed:25:11:91:c7:
6c:f0:6f:38:f1:eb:ad:2d:50:7c:29:7c:c9:2c:44:a7:23:d1:
e0:b2:7e:54:66:b8:dd:2f:6e:b3:85:46:c1:e2:ba:7e:14:e2:
96:68:1d:b2:67:49:d7:cd:b4:bf:ac:fc:19:09:74:41:66:1f:
07:9b:5d:50:11:61:a7:41:90:1b:71:3d:d4:13:52:5d:33:57:
9d:e5:11:36:56:32:e7:75:f3:65:38:c5:95:96:7c:82:fc:9c:
f7:af:1e:a2:cf:f2:d7:3c:8c:d8:3d:f3:ed:b3:1d:5d:fa:80:
e6:36:ce:15:b1:ef:0b:fc:38:84:b0:cb:d9:ca:9c:ed:fb:d7:
b7:69:b6:c5:db:f1:e3:57:a5:26:da:03:31:26:b8:05:bb:cd:
45:4e:4c:4c:60:9d:c9:e2:e4:9c:54:c6:82:6d:d4:3a:76:82:
8e:cd:46:3e:52:1e:75:87:b2:cf:fe:af:b1:98:81:94:32:84:
33:7d:ae:8f:65:d7:6c:62:90:2b:48:0c:b3:a6:ec:5a:82:ee:
16:16:83:60:59:be:22:9a:77:e4:a3:bf:40:21:42:8f:06:24:
ba:53:ce:5b:16:5d:4f:cb:07:31:00:2e:a0:9c:61:82:53:4f:
dd:70:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:38 2025 by rpki-client