Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: Rh4lTy9D1LGmhD8NsaeN3SRv7CrwFWqBj/WH5fDeo+o=
Subject key identifier: A3:C8:B7:02:89:DF:59:E0:D8:D9:D3:60:3C:AC:D9:F6:6A:EC:1D:45
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01993FF1F5AC0E732BDCAD6B0F6C417FB5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1683
Signing time: Fri 12 Sep 2025 22:00:45 +0000
Manifest this update: Fri 12 Sep 2025 22:00:45 +0000
Manifest next update: Sat 13 Sep 2025 22:00:45 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: /zSI7hoSVw0TQ3kJky63gos8pAdkEFityvnWd4ojic4=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:f1:f5:ac:0e:73:2b:dc:ad:6b:0f:6c:41:7f:b5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Sep 12 22:00:45 2025 GMT
Not After : Sep 13 22:00:45 2025 GMT
Subject: CN=a3c8b70289df59e0d8d9d3603cacd9f66aec1d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:25:6f:60:ea:2d:af:93:36:a7:c8:04:52:
a4:c3:13:61:20:43:6e:60:73:78:e6:4c:49:80:8d:
5f:48:c1:57:ae:84:ef:20:7e:08:3a:ff:bd:2c:c8:
db:d2:3e:47:3d:32:81:e7:8f:7a:d2:6c:e7:43:ba:
53:4c:6b:72:43:7d:5f:ad:62:d8:76:52:2f:34:69:
14:8c:9a:95:35:05:c8:69:1b:a6:7b:c3:7b:1a:b2:
33:5a:a1:aa:64:0a:44:a1:89:95:de:99:cc:7f:ff:
54:b2:26:e2:77:3d:fb:ee:80:68:c9:0d:83:43:49:
a4:bc:69:c6:93:24:ee:b8:8f:49:18:b0:2a:6a:1d:
a9:37:92:5a:4d:20:61:db:b1:37:db:8f:af:c0:dd:
46:06:6b:80:ff:52:f4:d7:b7:97:07:30:cf:87:2d:
a4:f2:c8:89:50:72:22:89:1b:1f:67:37:32:3f:3a:
0c:51:6b:1e:46:80:39:b1:df:bd:2a:17:4b:cf:6e:
4e:c3:59:4f:3c:0f:20:b2:be:14:12:b2:10:a1:b2:
e9:4e:21:c8:2d:c5:ea:91:73:00:38:64:99:ff:c1:
77:a1:34:a6:8e:17:90:96:0f:69:fb:3f:49:75:f3:
01:66:b9:2e:2f:37:8b:4f:07:a8:28:fb:41:b7:9a:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:B7:02:89:DF:59:E0:D8:D9:D3:60:3C:AC:D9:F6:6A:EC:1D:45
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a7:c9:e1:05:30:41:13:82:9e:b9:e4:bb:d8:af:6f:cf:47:
93:de:52:12:51:d2:0f:5b:3b:91:75:24:e3:ad:97:55:3a:b7:
b7:87:d9:8c:36:9a:15:ca:83:1e:4d:46:1e:e8:86:7b:95:4c:
42:67:c4:80:74:8c:fb:d1:f0:10:67:28:c8:9d:2b:aa:ce:79:
70:c0:09:d9:c8:c4:59:96:de:68:e5:1a:7d:25:74:b4:9e:3d:
2b:03:1c:b8:b6:2a:0d:bc:c6:7a:4f:22:32:aa:4e:b3:14:06:
2d:6b:e8:3e:70:e4:35:aa:47:25:32:13:42:88:3e:e8:d7:62:
4d:0d:73:54:0e:5a:51:f9:68:ec:1b:d5:a1:df:19:8a:25:6e:
68:12:5d:ce:79:78:96:97:88:00:e0:ad:1c:8f:af:24:23:a4:
9e:94:a4:14:e6:ea:ca:d7:21:c7:80:ad:06:61:99:c8:98:c2:
f1:fd:26:a6:5d:88:08:e2:d9:ef:68:58:2a:a5:43:52:72:75:
a7:80:cf:fc:a2:5f:8c:76:ca:68:d3:7f:4c:04:54:df:3c:2e:
7f:33:18:92:41:3b:ec:9c:53:f2:88:fd:cb:47:93:71:b6:ee:
f7:53:1e:cd:5c:81:04:86:84:a8:78:de:a3:18:3e:de:38:cb:
7f:c7:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 07:16:41 2025 by rpki-client