Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: PeiO/l2uHIlYpibEv+O/gEMkyxhr805o6Yuk6cY/l/Y=
Subject key identifier: 79:2A:DF:AD:1D:4B:2B:D5:99:2C:67:D7:AD:84:48:DF:5D:61:D9:F2
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01991D2FBA7A435AFA4797824928980C0D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 168E
Signing time: Sat 06 Sep 2025 04:01:31 +0000
Manifest this update: Sat 06 Sep 2025 04:01:31 +0000
Manifest next update: Sun 07 Sep 2025 04:01:31 +0000
Files and hashes: 1: 22MFoiE6iwEXKG4ff-0g9Nk9e6k.roa (hash: 8ZAHeiN8JfpnEbf0xNsrPzSUL91MdaXwePhbLZYQBGY=)
2: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (hash: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=)
3: AqlAoh2mHTGBQZiQ4Qu8bU198w8.roa (hash: QPQqaQ0W7/zxzqNuDuEf1YEVzGuiOziERZ9FXquvCOY=)
4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: XBIS8NDsOgZ58DMZO6dvtXSQHrz9sjUdlNrBoWNb0d0=)
5: JaRJ0VkgZY-pAOHUpfAksmRNPT4.roa (hash: uuAowSkk49o7aPUMDMEAR0rCVXNjJkNtV+Ttn8WfvGo=)
6: kGkGzImsb5Dv_nGgCWEXgWNc7do.roa (hash: x9SmJ5GmGF/t3I5NSMgnwkUR+oRC+nVpi/mDc40npw4=)
7: mpy8rjwhUPGfrwU4aNyK-9x9FBA.roa (hash: LExOCoVzbGwBygx3rcSIfApEZE8wTyOT0YOXpiy9v1U=)
8: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (hash: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:ba:7a:43:5a:fa:47:97:82:49:28:98:0c:0d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Sep 6 04:01:31 2025 GMT
Not After : Sep 7 04:01:31 2025 GMT
Subject: CN=792adfad1d4b2bd5992c67d7ad8448df5d61d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:d9:78:0b:a6:29:5c:c5:c5:27:a4:26:9f:
6f:11:59:d2:61:f9:68:01:5a:4e:df:8e:3a:d2:db:
18:ec:3a:03:81:f8:18:bd:41:a0:78:ca:01:34:4d:
c4:79:5e:20:6e:2c:5f:6b:22:b9:db:7d:e5:8a:b0:
7b:4d:4d:36:9a:e5:57:4c:47:7c:05:fd:89:06:c4:
5a:99:4f:ef:70:13:d1:a0:78:8d:e8:df:fd:2a:ea:
33:cd:69:d8:e8:07:24:a7:73:42:32:47:66:25:42:
1b:4f:a1:af:6f:02:b3:38:c7:14:f1:b8:27:78:58:
ac:fd:a6:c4:97:c9:0e:e9:e0:25:11:a2:45:76:29:
1c:6f:64:c9:29:b1:e1:db:79:02:88:96:1c:be:a9:
2d:36:06:54:20:7d:22:09:0a:40:a6:27:ea:5b:a3:
b2:3f:40:e2:e1:96:0c:b8:ef:d1:97:6e:b4:c6:00:
e0:90:d9:34:cd:b3:d1:06:a0:b4:c6:77:67:aa:28:
be:cb:7d:51:7a:2b:f4:a6:2a:5d:f2:ef:30:0e:62:
08:89:95:e8:08:9d:76:8e:97:77:6c:42:68:cc:1e:
a4:43:0b:ea:8e:03:28:7a:13:e8:f6:0e:3b:4c:6a:
bd:14:0d:86:0d:53:ac:4c:10:50:39:cc:7e:59:8d:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:DF:AD:1D:4B:2B:D5:99:2C:67:D7:AD:84:48:DF:5D:61:D9:F2
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:62:30:55:a5:a7:af:e3:ea:cf:7f:f3:8a:76:47:5b:8f:e4:
28:e8:50:bc:da:3f:90:91:84:4a:84:95:d0:1a:87:91:7e:30:
c4:1f:16:53:69:be:45:a0:76:06:92:59:3c:01:32:fc:36:9b:
c0:1a:f9:81:80:e0:85:ee:96:77:54:5b:73:70:c4:02:29:14:
06:d5:ae:7a:0e:af:d6:f1:c4:d1:00:78:22:85:48:b9:e3:75:
84:42:b0:94:0a:8e:91:5a:ed:81:e9:e4:62:01:66:b2:ae:4f:
9e:13:96:10:9e:86:26:82:13:dd:d8:9a:9e:98:e1:9c:e6:01:
54:fc:7c:f7:11:bb:64:e5:de:68:a8:89:b1:1a:04:09:49:77:
67:d7:37:41:9c:49:df:3e:ab:df:40:5b:b8:ff:c2:aa:1f:63:
23:6f:5d:dc:ef:06:db:05:fa:3c:dc:38:f4:dc:ce:e9:44:d9:
60:08:38:55:95:64:af:10:7c:bb:64:9e:13:6f:72:99:c7:81:
da:6b:b9:f2:16:b7:94:66:ba:69:8c:8c:ed:2c:85:93:3a:42:
df:ea:e6:af:64:74:d0:49:ca:64:de:3c:d8:25:be:90:e4:81:
0b:b0:3a:82:8e:de:0f:69:de:03:34:05:3e:a1:5c:63:70:47:
d4:d7:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:37:51 2025 by rpki-client