Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: wgHTk9VxI1L5YJWMQ/3Tzsywi/7ah8H4Vc4N5KLBgaw=
Subject key identifier: F7:43:80:BA:B4:34:E2:0F:7F:2A:90:58:03:5C:DE:0A:46:8E:94:19
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01992F6C6B0B21A2017106F6530D80B9B50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1556
Signing time: Tue 09 Sep 2025 17:00:58 +0000
Manifest this update: Tue 09 Sep 2025 17:00:58 +0000
Manifest next update: Wed 10 Sep 2025 17:00:58 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: E0DF4xDMb2q558ZIADhCUssriFibCAwWBoR8ETmMqUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:6b:0b:21:a2:01:71:06:f6:53:0d:80:b9:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Sep 9 17:00:58 2025 GMT
Not After : Sep 10 17:00:58 2025 GMT
Subject: CN=f74380bab434e20f7f2a9058035cde0a468e9419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:f4:68:a3:ce:e7:64:b9:99:7f:12:82:ed:
34:79:bc:35:7b:fe:ea:e5:b3:16:63:04:7c:05:f4:
8c:5f:fa:4c:9f:5c:8a:c2:c3:52:91:c0:47:00:bf:
be:d6:2f:b2:ef:78:15:72:4d:e9:2a:fc:53:eb:db:
be:ed:4d:43:11:2e:05:23:9d:04:9e:99:c5:a0:dd:
7f:28:be:52:63:e0:50:34:82:c2:e1:e5:a9:2f:5c:
cb:a4:a8:78:f1:cb:db:ff:f4:35:b7:48:3f:ba:dd:
11:3e:55:fe:70:4c:e4:b2:77:2b:de:7e:c0:bc:63:
b6:d1:ca:4e:7f:64:55:d1:da:d6:7b:8c:ad:31:5a:
f1:3e:26:34:df:4f:31:58:61:6b:d0:a0:76:d6:15:
77:ab:40:cc:47:48:04:6d:57:e2:8d:8d:ca:20:2e:
60:0d:bd:94:de:8a:39:61:4c:0f:83:10:d3:52:ec:
67:3d:26:8b:07:d8:08:6a:2d:c8:a3:c5:c4:a0:3b:
07:5e:1e:bf:64:11:8b:ef:83:c8:ab:8f:0c:1a:cc:
c8:97:ea:40:84:f6:ca:93:ea:b9:97:83:46:33:46:
96:93:a5:39:97:f3:cb:b3:a1:f4:07:2c:11:0a:f0:
8f:7e:5e:91:f1:10:d3:6b:57:40:15:f1:b7:b1:44:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:80:BA:B4:34:E2:0F:7F:2A:90:58:03:5C:DE:0A:46:8E:94:19
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d9:0f:91:ef:9c:3b:49:ef:19:b8:a4:d8:4b:8f:df:a4:09:
d2:71:d9:31:a9:6d:0b:39:e3:70:65:f0:87:c9:a8:a5:18:f7:
80:02:6b:07:d6:5c:5c:13:e4:46:28:c1:b4:d5:4a:89:44:45:
39:e9:cf:92:81:ee:8d:2a:e1:89:ea:39:69:76:2b:f4:75:10:
4a:7f:f3:03:0c:eb:cb:26:8c:a6:47:1b:af:6f:fc:13:de:aa:
c7:33:93:96:92:42:a3:9c:fa:c3:a7:74:3f:b3:ef:d1:90:12:
a6:04:6d:7e:5c:81:9d:aa:45:a2:c4:14:e2:c7:05:3f:9b:0f:
9b:fc:11:69:0b:d3:cc:62:67:5e:1a:41:3a:62:f2:07:89:8f:
da:7e:52:18:6b:ba:a5:0d:75:9a:93:47:8c:8a:f0:89:45:dd:
d9:96:df:7d:13:6c:a4:f7:a9:3a:63:78:dc:14:a4:27:3f:f1:
19:6b:8f:a7:35:1b:55:e4:42:04:64:be:87:25:21:da:42:a8:
19:75:56:c7:39:02:dc:0c:6e:27:2b:91:13:3b:4b:dc:cc:9e:
e1:da:cd:ca:2b:4b:bc:3a:18:4e:7d:49:43:61:d2:10:9d:71:
44:6d:e3:e2:7c:13:7a:fb:d7:d4:fb:02:f3:51:2b:cf:2e:45:
d1:6c:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:42:30 2025 by rpki-client