Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: 9vYQ4h5OwDNG5Z8BqRo9CM5GvGPnzGjd5TzBnTwxz5E=
Subject key identifier: B7:3B:A5:46:2F:45:6A:1A:5F:89:3E:FF:30:CE:79:50:32:BB:C1:7F
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019916F5D60992E8330A6B11BB670EDB7394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0F94
Signing time: Thu 04 Sep 2025 23:00:33 +0000
Manifest this update: Thu 04 Sep 2025 23:00:33 +0000
Manifest next update: Fri 05 Sep 2025 23:00:33 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: JRFtUPWMm32OBG4bzVzUmGCUD+TDY1cOU3CnkjMe61Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:d6:09:92:e8:33:0a:6b:11:bb:67:0e:db:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Sep 4 23:00:33 2025 GMT
Not After : Sep 5 23:00:33 2025 GMT
Subject: CN=b73ba5462f456a1a5f893eff30ce795032bbc17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:07:54:c0:53:94:8b:da:20:a1:97:a6:67:
02:e0:6a:17:1b:9b:93:7a:51:fc:8c:de:e1:9b:44:
d4:9e:0f:9d:7a:54:1a:d0:56:57:cb:12:a6:52:e9:
2d:b2:c5:8c:56:1f:8e:fd:36:9f:a6:87:21:7f:e5:
06:23:41:d9:5a:28:81:42:2e:6a:82:c0:27:2b:d5:
1c:22:03:95:f9:44:c0:7f:b7:7b:41:be:2d:ff:65:
4e:16:f1:9c:0b:af:b9:57:35:a2:1f:19:0b:c2:9f:
2e:9c:b8:27:be:0a:45:82:1b:41:fa:a0:b6:89:6f:
d9:f8:38:7e:96:a5:3a:af:c6:ca:5b:47:6a:f6:5f:
40:ee:f0:1e:f8:38:de:d8:48:72:b3:09:81:a4:fa:
e0:bd:df:f0:7a:e6:44:ef:2f:9d:8b:9e:74:a7:4b:
54:e6:2d:f2:88:64:22:25:14:a1:60:3f:00:c1:fd:
c8:3a:e8:0a:b7:7b:8c:d9:6a:90:1c:21:cf:d0:4a:
36:b7:26:a5:1e:f4:7b:dc:10:f1:90:bf:68:a0:e5:
a7:1d:f5:02:32:a4:4e:35:6e:69:bd:21:97:1f:4c:
e7:98:22:84:25:c0:24:1c:66:a0:dc:19:b1:ee:41:
77:72:b2:97:a7:6d:b3:3d:70:20:c1:a6:8a:ee:b6:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:A5:46:2F:45:6A:1A:5F:89:3E:FF:30:CE:79:50:32:BB:C1:7F
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:18:6b:2d:46:61:a3:23:0b:e5:56:44:59:1e:65:e6:56:3f:
7e:fd:9b:f4:93:11:c4:ed:35:c3:ae:51:f1:d6:d2:d4:87:df:
57:c2:11:88:5e:77:4c:db:d4:8b:f9:49:f0:04:81:0a:43:1c:
21:68:3d:3d:d4:7b:cd:88:2e:9b:14:23:d9:bd:44:e8:ea:29:
3a:13:f5:84:62:90:a6:63:fc:1c:fd:94:bc:91:50:ca:57:2b:
18:b7:02:73:18:30:16:d8:e6:13:97:8b:d2:84:a9:ee:8a:48:
a2:ba:62:33:5f:20:2f:b2:8b:75:d7:34:08:d6:18:9a:c1:17:
fc:af:9d:2d:26:76:95:7a:8a:97:f4:4c:79:56:0a:9c:55:22:
ef:d4:0f:fb:cd:57:28:91:89:43:bc:55:64:f1:46:38:d2:27:
40:2f:10:90:ba:7b:be:ef:b0:8b:55:1b:6b:76:85:36:81:20:
55:db:71:ee:12:e4:00:8c:df:20:ff:07:f7:6a:84:01:29:39:
54:08:67:fd:df:0c:ca:cc:89:b6:53:25:9e:a0:39:16:69:12:
f8:e5:4d:b4:22:8f:fb:c4:63:63:6e:fa:5c:38:c8:e9:e8:ad:
b6:82:2f:61:6f:b2:d7:10:b7:dd:c1:80:3e:84:26:d8:51:5d:
8a:15:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:13 2025 by rpki-client