Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: dXYgRFPb1pjhMKafRZfUOdvNfLOuK//Ja9E5o1iPHm0=
Subject key identifier: 72:71:8C:03:96:73:6A:40:5A:FE:AB:CF:3F:1D:7A:BB:C0:FE:ED:70
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0199176421E0C676A836E6154AB756D09814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0F55
Signing time: Fri 05 Sep 2025 01:01:02 +0000
Manifest this update: Fri 05 Sep 2025 01:01:02 +0000
Manifest next update: Sat 06 Sep 2025 01:01:02 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: NA11GDS1UYLhMIeHhecRzegdBWvgsvfCSnYbM9VAZE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:21:e0:c6:76:a8:36:e6:15:4a:b7:56:d0:98:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Sep 5 01:01:02 2025 GMT
Not After : Sep 6 01:01:02 2025 GMT
Subject: CN=72718c0396736a405afeabcf3f1d7abbc0feed70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:87:11:0d:43:c6:20:02:35:45:aa:f6:03:
b1:e7:db:d0:55:b2:5b:08:f0:e1:49:67:c5:ef:4c:
56:7a:53:cf:76:0e:2a:29:93:49:d0:82:db:0e:e6:
68:c5:9a:e5:77:2f:2b:44:e6:f6:c4:0c:ed:7b:e3:
8b:2c:90:d0:32:25:8a:0d:a2:df:43:03:43:90:f0:
df:10:a1:00:29:df:d8:0d:0f:4c:da:a0:5f:0b:8d:
6e:56:79:ba:96:b6:ca:ab:ac:a5:07:34:81:79:8c:
03:76:ad:47:d8:13:64:99:f7:fd:6b:3d:36:b0:77:
81:91:74:70:6f:54:1a:81:38:1b:c7:c9:d8:92:f9:
b4:44:69:ee:13:53:bd:1b:92:38:51:da:57:bd:50:
7f:1d:29:ae:37:c8:ef:31:3e:42:56:47:50:b9:bb:
aa:4f:49:4e:77:ad:c0:1c:02:7a:fb:88:bc:83:e9:
ef:7e:ee:b5:b6:16:72:5f:f7:da:4f:59:1e:18:a6:
54:91:3c:a3:1b:af:87:f1:2c:a2:bc:7f:03:82:a0:
84:0a:42:14:84:29:18:27:75:b6:76:cb:d8:93:41:
74:7b:6b:c9:a8:64:a0:e9:75:91:92:24:18:ee:8c:
1f:2b:4f:cf:e6:67:dd:1f:4c:e9:77:52:09:b7:c7:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:8C:03:96:73:6A:40:5A:FE:AB:CF:3F:1D:7A:BB:C0:FE:ED:70
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f2:01:7b:71:0e:da:43:2a:41:17:2d:b9:1c:7a:27:6e:d1:
22:50:b9:b7:f1:cb:cf:ec:e9:b2:23:a5:bf:45:28:e6:44:90:
55:ef:82:cc:a1:3d:57:1a:0c:7d:8e:89:36:fa:98:a3:de:6b:
9e:ae:13:e7:94:5b:e1:dc:b1:e3:96:48:6e:35:a0:64:c1:d6:
0d:ab:8a:94:13:28:14:0e:4d:26:c9:5d:44:2c:bb:31:77:18:
87:bd:6f:42:55:42:e6:28:f3:b6:73:8f:46:08:d2:c3:0e:c2:
91:09:0d:b4:5a:58:80:50:fb:3c:7a:85:3a:9a:57:4a:63:80:
e0:df:ea:43:78:f8:e0:6f:26:c4:bc:41:86:1d:76:f2:40:0b:
f6:9d:ac:58:4f:8a:aa:11:bd:e0:b3:f7:1b:45:69:b8:c6:b1:
cf:b8:81:5d:58:a6:e8:2d:6c:d9:95:33:e9:8d:da:83:bf:1e:
9c:33:85:57:e1:1e:92:fd:3a:f9:16:91:a7:44:45:11:e0:dc:
03:32:31:46:fc:49:f4:37:76:0f:2c:2a:7e:2f:cc:22:3c:05:
f6:4b:43:f9:f4:c0:63:8c:a5:03:47:7a:23:10:af:ea:16:9c:
fa:f2:cb:88:5a:a7:49:4a:17:24:25:eb:fb:64:77:44:5b:d0:
48:ab:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:12 2025 by rpki-client