Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: hPO/tGdHUB9UN+KMXX1xdisfOu6LYf3bDSi7ciKVs6I=
Subject key identifier: 5A:84:42:17:62:81:B0:AD:45:6A:7F:6A:6C:93:59:0B:A4:26:3A:0D
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 0199364A48AA8277F01D718C893F64987FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 1392
Signing time: Thu 11 Sep 2025 01:01:01 +0000
Manifest this update: Thu 11 Sep 2025 01:01:01 +0000
Manifest next update: Fri 12 Sep 2025 01:01:01 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: 72wQmGX5RawkW8aFt0bZglUQ7ODeVt2XHeDDlhcC5Kk=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:48:aa:82:77:f0:1d:71:8c:89:3f:64:98:7f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Sep 11 01:01:01 2025 GMT
Not After : Sep 12 01:01:01 2025 GMT
Subject: CN=5a8442176281b0ad456a7f6a6c93590ba4263a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:ed:6e:89:b7:a5:1d:9b:8b:cf:86:02:4e:
9e:bc:14:53:5f:5b:d5:11:6d:37:b5:20:b4:7d:49:
14:68:f7:b6:c1:54:46:d5:98:78:0e:70:7c:b5:63:
ec:7c:f1:b0:c1:1a:cd:ef:11:9e:5a:f0:8f:8f:a9:
4b:e7:9b:54:a6:84:1d:57:60:88:2e:34:7c:b6:a3:
3b:ea:12:a8:12:c5:d0:ba:eb:d2:f1:df:29:ad:8e:
86:19:90:61:62:6e:75:06:5e:39:25:65:4e:a5:e7:
af:66:c7:62:a2:4e:1d:bd:2a:12:3f:47:94:d1:7b:
36:92:b2:94:b5:af:29:36:a6:48:38:aa:82:69:a4:
5c:d7:fd:9b:ea:c0:4c:0e:14:fd:65:95:4c:62:f2:
7d:64:bd:f5:62:a0:a1:cb:f1:5f:37:76:f3:41:a4:
5a:b8:c0:54:66:d5:29:ea:d4:98:5f:80:d9:1d:c8:
3c:09:13:f7:ff:4c:ab:95:19:37:34:12:49:fb:2d:
d4:14:12:a1:cb:5e:7b:69:55:60:ad:a3:7c:e6:85:
4c:60:17:4e:9a:d5:51:95:51:81:43:91:4c:0b:04:
c0:44:22:0a:8e:dc:b0:da:fe:f2:17:a5:5c:d8:38:
df:2a:e5:32:ec:e3:8d:e0:ab:b1:ed:d9:65:67:c9:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:42:17:62:81:B0:AD:45:6A:7F:6A:6C:93:59:0B:A4:26:3A:0D
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:67:0f:51:42:83:cf:d9:1c:4b:30:df:51:91:e6:86:65:
0f:06:e1:38:d8:ad:02:fb:fd:78:b2:d0:ed:1c:d3:ed:87:c8:
00:17:a9:6c:2d:72:91:67:f3:70:34:d0:c4:13:a0:56:b1:93:
1f:fc:9c:cb:0e:09:35:38:68:71:2c:ce:87:cd:8a:10:50:57:
c3:56:61:63:05:63:56:be:24:d3:c6:8f:1b:3c:ef:35:ae:da:
12:35:a6:2c:6a:96:fe:b7:91:6e:87:9e:44:1b:a3:65:c7:24:
31:e4:16:74:1b:2c:5d:9a:57:fb:e9:d5:c7:64:21:d5:32:1b:
8f:ac:29:2b:7d:76:ee:3e:b0:c0:ac:75:48:59:f1:c6:c8:10:
e8:85:f4:81:24:88:bb:05:b9:9d:6a:7d:cc:95:2b:9d:84:96:
4c:83:eb:56:46:47:af:04:8d:2b:fa:50:69:42:fe:b1:1b:b2:
46:d4:ac:30:c7:56:ac:c3:67:8c:9f:a8:92:d4:eb:da:a4:b4:
be:7c:c2:6d:1b:98:67:38:f1:ae:b8:e1:cd:10:8d:f1:c2:13:
50:5f:ad:82:af:fb:44:b7:c9:0e:60:14:44:b5:74:f9:55:84:
f5:e9:ac:38:25:5e:db:a2:89:de:81:54:6b:d5:1a:ee:d9:3f:
26:f6:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:05:58 2025 by rpki-client