Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: oG2kJJ5MdUWklEfNohEF4YBJjEQdcHGsBb236OEr7ck=
Subject key identifier: 82:2E:BC:94:8A:51:08:12:07:46:9D:F9:DE:B8:0F:13:A0:BD:D7:F9
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019937261343AA7A43F199B4860F075D9F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 05:01:06 +0000
Manifest this update: Thu 11 Sep 2025 05:01:06 +0000
Manifest next update: Fri 12 Sep 2025 05:01:06 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: A8XbVLh9p/WeI3+Ll8gyp6eEJiWfEN6JMQ+7qbMFhzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:13:43:aa:7a:43:f1:99:b4:86:0f:07:5d:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Sep 11 05:01:06 2025 GMT
Not After : Sep 12 05:01:06 2025 GMT
Subject: CN=822ebc948a51081207469df9deb80f13a0bdd7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:06:74:39:94:9b:e2:d4:ca:23:2b:9c:40:
9d:37:1f:d5:26:60:00:a6:ca:50:62:f4:54:e4:2e:
34:06:48:bb:77:23:38:02:df:b4:69:bd:32:78:e1:
3d:7f:f6:b6:91:66:a2:9e:e2:1b:dd:91:3d:89:b5:
e6:8f:d5:1e:9c:58:48:8f:6f:81:63:b6:38:dc:66:
20:eb:05:ef:33:9a:b9:86:b1:52:0e:9a:86:56:89:
79:28:7b:73:af:99:b6:fd:70:59:7c:25:8f:e8:b7:
d3:9e:d2:bb:d8:68:a7:10:ba:57:02:3e:7a:bf:5f:
3f:34:03:a9:1d:6b:4c:33:02:f0:ad:00:44:f3:85:
74:5e:a1:16:d2:b2:5c:a4:61:d4:d5:d3:de:ea:10:
07:28:3f:31:c2:e1:ae:e9:b9:82:9a:99:d5:43:eb:
ea:d8:ef:b5:19:d9:56:6d:bd:d8:95:a2:22:3e:7f:
00:f3:dc:bf:20:f4:94:a8:90:db:13:80:11:b0:1c:
16:13:6e:98:f2:62:17:71:e2:37:77:b6:32:c7:cc:
96:d6:07:ca:21:dd:c7:cf:f9:34:c7:37:e5:bc:92:
e6:23:06:c5:8e:a9:69:5f:16:90:0c:27:85:05:4d:
bd:62:6c:73:8d:ab:9b:68:4b:11:89:a0:93:4e:7d:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:BC:94:8A:51:08:12:07:46:9D:F9:DE:B8:0F:13:A0:BD:D7:F9
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:84:dc:fb:65:53:ea:79:c5:d5:2f:0f:68:ef:83:c2:40:3a:
5e:a3:67:e3:6e:fb:b1:0a:ea:97:b7:42:0f:10:08:d8:ec:2b:
98:ba:9c:bb:57:5f:07:47:fb:db:f0:57:69:6c:cd:c6:be:9c:
2b:e3:d4:89:8a:9e:9a:6b:dc:3b:72:87:d8:68:0e:cf:b0:55:
4f:01:8c:a0:6e:0e:26:10:81:90:79:56:bb:35:d1:ef:26:3c:
d1:f4:a6:dc:9d:70:00:b1:90:d4:89:ff:a6:a4:87:77:fa:83:
30:25:29:32:7b:85:86:40:3a:be:dc:8d:46:8d:6c:42:d4:1c:
f2:90:e5:4a:e5:e9:14:a8:62:23:03:2a:8f:07:95:99:8c:a8:
83:01:41:d2:e2:d1:62:c9:73:cf:53:b2:8e:7c:a2:f3:c2:f5:
45:4b:72:31:ab:ec:a9:45:93:4e:bf:1d:fa:1d:f9:84:47:9c:
67:2f:34:00:23:dc:39:e4:fa:be:32:d2:42:ba:34:0d:62:0d:
1e:87:68:38:c1:7a:72:05:fd:2c:a8:6c:f3:17:b8:50:ed:a2:
e2:bc:f9:2d:bb:c7:50:fe:df:fe:85:45:c2:b3:7c:03:68:60:
b6:3c:36:d0:8f:0d:10:44:91:6f:30:e4:59:1c:e6:bd:f3:69:
36:a9:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:54:46 2025 by rpki-client