Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: 7Nbl6owBtArhqLMaTO/db0isp6+t/lYcuVTAYO0Q8RY=
Subject key identifier: B0:0F:28:BC:DB:30:AA:44:64:37:BA:E4:36:45:66:B3:6D:7C:18:2E
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 0199239FDD8BCF8C7916F294ADF6743FE667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0A1D
Signing time: Sun 07 Sep 2025 10:01:43 +0000
Manifest this update: Sun 07 Sep 2025 10:01:43 +0000
Manifest next update: Mon 08 Sep 2025 10:01:43 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: Qv+kUyHnQ7eggbWepu1Anw4gOjiryLrxyX/taL2TQzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:dd:8b:cf:8c:79:16:f2:94:ad:f6:74:3f:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Sep 7 10:01:43 2025 GMT
Not After : Sep 8 10:01:43 2025 GMT
Subject: CN=b00f28bcdb30aa446437bae4364566b36d7c182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:60:03:df:9f:87:4b:a9:2e:47:03:55:8f:
08:c9:44:fc:74:ad:c7:9d:d6:0a:93:5e:d4:c3:d1:
a4:d0:69:61:11:a0:b6:63:5f:1d:c5:66:5f:8a:73:
9a:33:79:07:9f:3b:bd:c2:02:57:e1:6a:ad:43:d3:
2a:fe:f7:55:5e:12:d9:87:ba:92:c3:91:e4:68:db:
34:06:4f:bb:38:9a:0e:71:58:72:b0:42:ed:58:ea:
ed:59:33:aa:d8:ed:7e:67:1c:28:1e:6a:90:dc:d4:
0c:6c:bc:b6:e8:e0:b0:a4:2d:c6:19:ab:1a:15:fd:
d0:ed:8c:fe:3f:b6:4f:6a:a3:9d:ce:b0:f6:ef:7f:
e1:cf:66:e4:9b:1b:38:9c:36:32:64:8b:b4:5a:7c:
b0:85:48:57:28:78:8b:78:66:84:c1:c6:28:ce:88:
2e:c8:a9:8f:6d:8e:56:55:1a:da:12:e0:39:06:70:
9b:5f:6b:20:ba:65:6f:0d:ea:69:15:22:7d:1d:bf:
1d:77:c5:aa:6b:17:57:9d:c8:6c:2e:3a:a4:1b:0f:
76:55:f3:3f:a0:a6:be:fd:5a:95:6e:32:0e:90:57:
86:0e:26:21:10:b0:c3:be:ed:cc:8a:5f:65:54:1c:
25:9f:08:58:35:0b:e8:02:54:ed:33:31:90:6f:59:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:28:BC:DB:30:AA:44:64:37:BA:E4:36:45:66:B3:6D:7C:18:2E
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a5:49:44:6f:6b:28:c5:c5:bb:81:b1:e3:21:2e:8f:73:b5:
42:02:60:31:b6:7b:4d:63:cf:45:e4:5c:e1:cd:3b:e9:28:e8:
44:e1:32:45:24:c3:2a:df:5c:86:9b:56:8e:e8:7b:2e:4d:b7:
0d:21:11:25:d8:aa:43:23:ea:10:6f:8a:d2:92:ac:0d:f0:4d:
8b:7b:ed:e2:c4:cd:84:e9:35:c8:44:f5:93:89:1f:c4:0b:ac:
49:71:1d:30:5c:70:6f:b2:e7:bf:9f:c9:f7:fb:84:ba:13:2a:
83:86:b7:b2:28:72:e5:25:f3:b5:50:1b:ea:81:40:31:f4:83:
93:c5:93:f7:92:27:d0:7c:6f:34:8c:c0:9f:a4:c5:ee:e9:cf:
0f:5b:39:c5:2b:41:5e:b7:00:a7:1a:8e:c6:3f:f9:7f:58:82:
8a:7d:b8:cb:c3:42:78:30:49:59:f3:fb:60:17:bd:ff:98:89:
4f:96:0f:5a:56:81:69:e3:90:2b:03:9e:0e:cb:9c:0d:0b:98:
df:4d:93:db:46:f7:7c:ec:f3:9d:c5:9f:42:92:9b:66:81:e6:
a0:89:21:0c:11:a2:81:5f:47:4c:be:0a:29:77:ae:8f:15:f5:
41:c5:b3:cd:79:3b:f8:81:2b:85:59:15:09:c3:f6:e0:7e:7c:
02:2d:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:40 2025 by rpki-client