Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier: hSDVDaSQ66Jt8V7g/syWhujUVuNGWnphqNp1clFpgpk=
Subject key identifier: 8A:A2:F9:F8:A0:63:E4:12:EA:A8:4F:20:21:86:2A:59:71:FA:35:11
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019922FAB67583E4794E026AF36E921B8AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number: 0F91
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: eZp/GTqjM3qjyURx4jAlbMcsoBrTbUTIRobl9/+L46o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b6:75:83:e4:79:4e:02:6a:f3:6e:92:1b:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=8aa2f9f8a063e412eaa84f2021862a5971fa3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:3c:93:86:84:0a:85:07:f1:57:90:7f:b1:
88:75:06:51:db:5b:9e:18:32:b4:87:0f:99:30:25:
50:7f:dd:fb:81:95:94:2e:80:11:f1:53:a4:0c:60:
0b:9c:58:b9:58:97:3a:38:91:cd:e5:0a:e5:79:36:
c7:7f:70:45:30:7f:28:93:cb:68:63:d2:6f:4e:82:
3f:dd:a0:2f:45:85:dd:5a:51:1a:0f:06:07:a7:d5:
f6:ad:2a:ca:56:42:cc:05:6c:50:ab:2a:10:e8:f5:
4b:a6:07:90:7b:4e:90:dd:83:4f:67:24:e0:b2:4d:
46:4d:49:10:1d:60:e5:67:cc:9e:09:ca:4b:5a:80:
98:bc:49:7f:39:26:29:a9:9d:fb:78:11:f6:2e:c5:
c6:d7:10:f9:da:c6:13:8b:41:f1:94:58:0b:4a:b0:
6e:a5:79:00:bc:90:55:fb:27:d6:89:b7:f4:26:b0:
2e:0f:b2:20:06:9a:8e:f1:f9:9d:e1:f1:6c:58:74:
7c:4f:c7:9f:dc:c3:b3:ab:f2:40:f6:f9:ac:2b:43:
f1:8f:d8:91:85:2b:e2:ca:bd:fb:0d:73:58:ca:3d:
86:76:a2:22:3a:59:27:91:df:e2:50:87:b2:33:22:
30:d7:b7:88:2e:30:dc:53:4e:30:55:a6:23:b2:bb:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:F9:F8:A0:63:E4:12:EA:A8:4F:20:21:86:2A:59:71:FA:35:11
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ae:57:86:70:47:d8:dd:6b:4e:6a:35:51:15:f9:a0:ea:e6:
26:a7:48:6c:c1:79:40:91:e6:12:6c:fb:cd:28:37:27:e8:ba:
15:9a:91:49:1a:6e:6b:84:4a:19:a9:17:8f:f6:11:c5:a4:73:
b2:66:f3:d8:e2:2b:ed:ef:d2:1f:6c:bd:10:18:e4:57:51:cc:
00:d9:bc:b8:54:62:32:6c:52:14:23:0b:a6:f2:7e:13:97:e7:
5c:b5:4a:5e:a2:e0:55:c6:72:7b:64:ab:6a:08:85:0a:78:b0:
82:66:a9:63:4b:c3:d7:5e:6c:b2:27:2d:cb:74:0f:5f:d6:1c:
81:16:3f:0d:94:8f:e8:97:44:79:2b:a9:17:71:b3:23:84:da:
7d:b5:06:71:fe:9c:69:7a:46:27:e2:7c:ee:34:8a:da:09:9b:
34:61:e9:9c:77:ac:35:68:ab:35:cd:83:e1:5b:e5:a1:1d:08:
95:2e:d3:46:3e:56:1b:f9:73:52:eb:1e:26:a3:f4:d1:85:e8:
85:01:5f:1c:a3:b6:06:22:0f:ee:11:80:02:24:ce:0b:60:15:
6f:01:ff:5f:eb:b5:22:70:27:c3:b2:2a:7f:b8:1d:ff:20:c9:
13:49:a1:42:64:89:1c:c2:ee:bf:19:09:f7:c4:fc:d6:a7:cc:
e2:8d:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:23 2025 by rpki-client