Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: 2ODszx2KU1eYB30crw3L8Uykknui24g/qFY3E1Wrj1I=
Subject key identifier: AB:D5:4E:3C:E2:82:F5:B6:05:40:62:45:08:34:5A:AE:A4:49:CF:85
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0199183F4B727170DDC303ED08A02630B855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 12ED
Signing time: Fri 05 Sep 2025 05:00:25 +0000
Manifest this update: Fri 05 Sep 2025 05:00:25 +0000
Manifest next update: Sat 06 Sep 2025 05:00:25 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: ewDeSU5hFlsOCoM33EgUwli6O1enW9UDwqBvUVQYeFg=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:4b:72:71:70:dd:c3:03:ed:08:a0:26:30:b8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Sep 5 05:00:25 2025 GMT
Not After : Sep 6 05:00:25 2025 GMT
Subject: CN=abd54e3ce282f5b60540624508345aaea449cf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:7b:ed:a6:4d:2c:f5:3a:a2:44:5a:f7:6a:
61:16:13:08:20:65:83:2f:6b:b1:61:7d:f9:79:5f:
b6:0d:14:06:11:2c:4d:ea:4f:6f:90:7d:59:a4:b4:
3d:03:f5:bb:30:94:1d:1c:9f:43:de:3a:12:88:14:
d5:3c:79:de:cd:ef:22:2a:60:fc:ff:13:d8:f9:65:
af:a4:5b:85:80:0e:d5:27:9a:01:78:e7:40:3c:eb:
2a:42:28:a3:e5:01:0e:6b:21:cd:d0:24:93:f9:85:
61:2f:4e:38:a9:f8:f0:41:73:29:e9:0d:92:b2:da:
fb:4e:4c:98:b1:1d:13:c7:e3:3d:4e:52:83:0c:b7:
5b:de:c6:31:43:6e:6d:4d:d1:32:0f:b6:8e:be:44:
c1:3c:62:9b:a3:2c:8a:c5:04:f7:5f:37:2a:2b:bc:
af:34:bd:64:f3:af:15:7b:45:07:e3:c5:9e:13:5c:
8d:a8:0d:7e:36:ab:27:08:31:2e:69:b3:2d:8c:d1:
bd:ad:dc:ad:02:d8:fe:bd:bc:1e:43:f3:34:4c:c7:
93:b3:d0:82:fe:f5:0d:b5:15:64:74:73:69:5c:7f:
5f:e7:da:cc:e8:ab:70:29:f4:a1:de:60:70:ac:77:
ac:0f:34:62:ca:65:45:6d:0c:4b:d8:b3:4d:a0:a6:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:4E:3C:E2:82:F5:B6:05:40:62:45:08:34:5A:AE:A4:49:CF:85
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:50:f0:e1:27:88:90:0c:e8:8c:fd:0c:56:a0:f2:03:8e:b3:
b6:4c:7b:9f:a4:2f:49:50:57:f6:1d:28:97:5a:5d:d1:09:27:
22:f7:a1:54:48:55:f9:d2:45:c8:48:60:b8:79:29:67:f8:25:
27:70:eb:67:6b:a3:80:84:4f:d5:85:26:1b:86:8e:54:f5:57:
a0:bc:4f:81:2d:71:ba:81:91:9d:89:b7:96:18:13:17:e4:cb:
1b:71:b2:42:85:de:b1:4e:eb:b6:60:4f:6e:4e:32:6c:55:c0:
60:05:ba:6a:39:4a:20:42:32:8d:a2:db:7d:7b:b6:87:75:0a:
2f:dd:d8:07:a4:53:88:94:eb:fb:56:76:c7:35:3f:67:54:fc:
b1:e9:11:95:19:8e:d3:43:e1:d2:a9:cd:64:ee:e1:d7:f5:dd:
63:ac:2f:e1:5c:1a:b8:52:fe:f2:4d:82:b7:8a:f3:cb:7b:bb:
a8:12:39:fd:ea:f4:cf:dd:9b:77:dd:17:31:f2:60:af:f9:8e:
94:7e:5c:25:71:37:21:dc:73:82:27:70:4a:ec:46:d7:08:af:
95:15:84:32:f7:0b:6c:db:35:bd:ea:35:2f:cc:1d:ad:00:c9:
3a:df:9c:22:b5:a0:9d:8c:18:a4:ee:e9:27:a3:14:71:d6:7f:
4f:47:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:19 2025 by rpki-client