Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: zYJxfko7Rt3nOWTmFSzqDsfB3Hc5gmE4HIWfONGkGRQ=
Subject key identifier: D4:28:88:8E:AC:4E:4A:59:F1:D8:03:50:AE:EB:58:18:BF:0A:0D:72
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 01992F3587D91FE416B6743A5567559C5AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 048C
Signing time: Tue 09 Sep 2025 16:01:01 +0000
Manifest this update: Tue 09 Sep 2025 16:01:01 +0000
Manifest next update: Wed 10 Sep 2025 16:01:01 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: /hlYmyj+4wi8cJ4yNWInqumH4eW/jyUstU5Rq+I0hxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:87:d9:1f:e4:16:b6:74:3a:55:67:55:9c:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Sep 9 16:01:01 2025 GMT
Not After : Sep 10 16:01:01 2025 GMT
Subject: CN=d428888eac4e4a59f1d80350aeeb5818bf0a0d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:87:00:70:03:dd:c2:27:ee:48:ee:9f:a1:
3d:4d:ec:11:b0:2a:7e:be:d2:a5:f4:89:94:bd:ab:
ec:82:70:7d:65:f3:0a:51:f2:d8:90:04:6a:c3:e4:
c4:80:6f:15:67:f5:6f:39:7e:ba:87:a8:6a:57:08:
bb:a0:f7:3e:ac:4a:ba:03:8f:dd:f9:61:18:30:87:
e9:08:b5:ec:3e:11:5c:a2:55:40:e3:11:41:23:ea:
0b:97:5d:8d:62:47:77:b3:d4:20:0c:d1:fd:15:0d:
c8:05:d8:dc:fa:78:9a:6e:4e:08:2c:30:d0:47:a9:
ce:62:c5:c5:e0:b9:f1:59:8a:30:59:26:94:c1:a3:
de:ac:8b:3e:73:99:b8:32:bf:04:d9:a4:74:4a:de:
2f:a5:28:2c:fb:f0:1c:6d:43:48:82:f6:bd:fd:5f:
6f:3d:b0:db:a7:80:9e:7e:4b:2a:16:21:98:47:84:
25:75:e3:9d:81:be:04:ae:34:0f:44:d9:e6:d3:74:
d0:12:71:08:71:05:0b:23:48:e1:94:fb:0b:bf:5f:
11:09:e9:dd:85:6e:1e:32:70:44:69:5b:0c:cd:65:
75:e4:ab:d2:20:3f:48:d2:94:56:02:b6:d0:76:b2:
82:1a:f5:30:e5:1e:0b:49:a3:63:22:19:d3:5a:68:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:88:8E:AC:4E:4A:59:F1:D8:03:50:AE:EB:58:18:BF:0A:0D:72
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:68:36:fc:91:ac:3a:c1:e6:4e:33:00:83:95:2a:9e:9b:88:
3b:23:6d:4f:36:bc:83:7f:b3:c1:04:5c:e3:0f:00:f8:6b:fa:
97:2a:bb:dc:30:6c:cc:0f:5d:5d:18:da:e2:2f:97:75:29:8b:
03:cc:78:e8:eb:53:a7:50:6b:b7:59:95:77:27:60:4d:2c:ff:
67:3f:e3:38:43:da:96:94:d5:70:28:a8:b6:70:7c:a4:1d:f3:
41:cc:8a:59:bd:9d:9d:44:fb:2f:fc:4f:e0:1a:70:3e:1f:09:
49:a6:84:96:1d:2f:91:77:f8:9b:7c:be:70:f6:5f:f3:66:b5:
a4:fc:2a:91:f5:a5:38:a3:c1:fd:d2:d5:86:12:c5:e0:6d:26:
a6:da:ba:a8:ed:7c:f6:2c:b4:e7:81:09:34:1c:5d:b6:d5:11:
34:70:78:b5:05:b0:55:33:9a:6e:65:1e:6a:be:d1:65:72:3b:
7c:c8:de:83:c3:64:6f:cb:c5:59:8e:66:59:f8:87:97:bd:c8:
40:95:7c:1c:79:dc:41:ca:dc:07:78:a0:b4:df:0e:3c:21:71:
08:d0:a7:e4:41:97:ea:ba:14:cd:cf:b1:c2:f5:42:2e:55:72:
09:65:fd:12:6f:a8:d1:2a:fc:98:26:38:d5:c3:1e:40:ec:f0:
54:a4:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:37:55 2025 by rpki-client