Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: Jd0pyo/Thik8nn6VgJfTuKJu/wXMn9EJT9pgMVjEvv4=
Subject key identifier: 6B:15:23:B6:D2:29:C2:39:FC:95:6A:F5:DE:81:6E:B3:3A:30:47:BB
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019932A3C022447DB8FDECDC0200CB53F5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1579
Signing time: Wed 10 Sep 2025 08:00:16 +0000
Manifest this update: Wed 10 Sep 2025 08:00:16 +0000
Manifest next update: Thu 11 Sep 2025 08:00:16 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: D63dnHWet2cuZWrjcr51OtWosassNptRFMNecxWzi/Y=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:c0:22:44:7d:b8:fd:ec:dc:02:00:cb:53:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Sep 10 08:00:16 2025 GMT
Not After : Sep 11 08:00:16 2025 GMT
Subject: CN=6b1523b6d229c239fc956af5de816eb33a3047bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:b4:6a:20:68:94:f1:0c:ea:1d:c4:df:d1:
29:42:03:68:d1:70:e2:09:ce:bb:bd:72:fa:e1:53:
1b:52:d3:1b:1b:d2:9d:70:0b:00:5c:72:04:48:9d:
93:8d:b4:34:b6:2c:e5:28:a9:c0:c9:ae:1c:a8:ca:
a8:9d:b0:89:ed:cb:cc:3f:89:cf:24:c3:e7:a7:96:
c5:65:7a:b4:f3:94:72:ff:26:dd:89:59:db:b1:da:
78:d3:13:90:2e:de:99:9b:c1:b6:f0:b1:7a:52:e3:
53:fe:15:47:75:e1:2b:33:67:87:1b:5a:6e:16:63:
22:60:5e:af:5f:58:49:bd:91:e1:b1:ad:04:78:7e:
f4:0a:c4:3c:12:8d:56:5a:45:c5:8b:04:63:0e:c7:
7e:38:82:db:76:07:45:42:60:37:28:68:fc:a2:99:
3f:12:76:09:d9:20:20:8b:91:88:59:4f:55:6a:e7:
5c:1f:f6:c5:d5:c4:7c:57:74:a3:86:66:0f:7a:c2:
32:b3:bb:fc:c9:c8:cb:19:09:67:93:b1:c2:92:a8:
63:2c:93:8a:07:60:cb:9f:29:e5:3f:6c:bc:91:09:
99:85:dd:8c:a0:76:b1:cc:8b:b9:fa:8d:63:b4:db:
b8:70:96:29:36:41:64:79:7a:19:5c:e0:be:92:21:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:15:23:B6:D2:29:C2:39:FC:95:6A:F5:DE:81:6E:B3:3A:30:47:BB
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:45:07:bc:10:95:b4:4f:8d:cb:65:5e:9a:cd:38:21:5e:bb:
23:e2:fb:ce:6f:85:1e:77:12:ad:6b:cc:16:c3:fc:0e:51:94:
8e:a8:24:d2:48:19:85:de:92:1f:7e:d1:b0:bd:37:20:80:f7:
5e:40:cd:f7:12:1f:a4:fc:ae:cf:89:76:da:0a:28:75:d1:c9:
6e:57:6d:03:93:58:57:35:cb:78:d6:43:7b:0a:ba:76:0d:13:
3d:45:98:d7:c6:7f:80:3a:c9:c7:04:7d:23:2d:e5:8d:2e:ca:
25:b7:9f:11:42:25:0f:1a:2f:bd:4d:65:35:f6:30:3e:f9:0d:
33:56:9c:81:02:d3:d3:f2:14:ac:e0:61:5e:13:fd:1f:b5:0c:
54:9c:ce:7f:1b:e6:e6:97:86:b3:e3:8d:35:cc:de:1f:46:d4:
52:d2:67:37:81:d7:5e:48:79:46:ed:37:d2:b1:a8:67:0b:05:
72:b1:8e:2a:ce:8e:77:52:79:25:23:30:7c:34:2c:1c:fe:6a:
92:6f:5b:a6:1c:be:63:cd:26:b7:8a:4a:f4:de:ee:20:f0:2f:
00:9f:6b:3b:42:4b:37:fd:9a:aa:9f:35:d5:0a:41:b4:6f:e9:
08:97:b0:2f:44:29:9e:3e:2e:b6:ef:19:61:a6:4e:97:96:76:
9c:b3:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:34:09 2025 by rpki-client