Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: ZGJxluogvlrlmnuwbxLT0Y1qD2TdiAIN8uytAqvL4jU=
Subject key identifier: 81:5F:EE:A6:4A:CE:68:3E:24:E6:F9:27:35:E3:20:1A:FA:35:E0:9D
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 0199228C99EEA64C395A8AC55E20F75E75B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0D96
Signing time: Sun 07 Sep 2025 05:01:03 +0000
Manifest this update: Sun 07 Sep 2025 05:01:03 +0000
Manifest next update: Mon 08 Sep 2025 05:01:03 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: YHmAx2PrK3r+ovt6/l/RvyYmMtvqheYaSX4w/XzzbNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:99:ee:a6:4c:39:5a:8a:c5:5e:20:f7:5e:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Sep 7 05:01:03 2025 GMT
Not After : Sep 8 05:01:03 2025 GMT
Subject: CN=815feea64ace683e24e6f92735e3201afa35e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:68:65:27:6a:93:b8:f5:23:20:e2:da:80:
ac:0d:be:e6:21:b4:6a:4d:fb:2e:0d:72:13:85:a1:
f6:81:48:19:39:e7:ad:ad:a3:d2:1f:16:6d:ac:75:
da:cb:bb:e4:aa:e5:52:64:e9:d0:c5:b7:33:b7:37:
fd:5a:8f:67:3f:27:bd:86:c1:27:05:d4:fe:a2:92:
be:da:46:2a:d6:7d:a5:7f:a9:b4:27:a0:09:e6:71:
78:fb:07:ba:e6:61:be:40:65:7e:8f:26:33:89:f2:
bf:7c:97:2a:0b:a2:88:21:ae:05:0f:6d:b9:36:82:
35:18:c8:20:02:75:15:ca:23:a1:17:a8:2a:44:95:
e3:6a:d3:12:2b:a6:16:be:99:2f:5c:d1:ab:fb:23:
09:44:96:9b:d1:39:86:67:00:5d:e9:a8:d5:5b:0b:
33:d6:47:3f:32:94:4a:f4:e8:72:32:a2:4f:6f:00:
a4:7b:02:67:c9:f9:2d:11:e2:8d:ac:29:33:13:27:
8b:9a:46:7c:17:c0:dd:d7:c5:6e:6f:4a:79:d2:e5:
43:1c:f7:e1:9d:61:dd:23:12:d3:5d:3f:ae:e2:8e:
45:55:9d:57:b9:c7:8f:84:b2:1a:c2:7d:0f:7f:6a:
21:0e:f2:ac:36:c9:8a:0a:85:66:65:f7:a3:01:64:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:EE:A6:4A:CE:68:3E:24:E6:F9:27:35:E3:20:1A:FA:35:E0:9D
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6d:15:ee:7a:24:0c:9f:a7:f7:f9:81:96:34:cb:fe:73:67:
8d:e1:9f:56:d5:99:1a:cb:98:61:2d:40:33:38:e3:64:cb:b7:
2b:0e:6c:ba:5a:d0:d1:c8:60:16:1e:c0:93:c4:c9:7a:96:a6:
32:47:79:76:08:97:1d:4e:a0:57:71:52:cb:49:e2:3b:55:03:
de:3b:1d:54:f6:7b:32:0c:eb:50:f9:30:f6:7d:a7:8e:86:2a:
ae:57:e4:d6:5c:e3:c4:45:5a:de:c3:88:7a:29:2b:02:db:68:
a4:b0:3e:ab:a9:03:01:a2:f7:b7:9f:4e:ae:a2:e4:02:1c:34:
15:f4:69:23:d5:97:2b:98:f5:aa:10:68:67:c0:0a:12:be:5b:
41:37:05:c4:02:b7:8f:17:29:01:0e:c5:54:09:5d:eb:70:ac:
4b:42:3d:94:24:87:47:64:96:20:8f:ab:e0:5d:78:f6:94:37:
e7:df:32:05:0d:a5:4b:28:16:5a:3b:7b:c3:96:cc:3c:f1:78:
9e:f3:84:66:09:06:96:6d:5c:87:eb:08:96:86:57:f0:bd:3f:
12:c4:4d:f1:4a:3a:46:92:c3:71:4f:a9:5d:71:23:1c:06:a7:
cd:66:ca:1a:af:f4:b4:9f:11:57:cc:04:2b:9f:d0:80:a8:5d:
3b:e9:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client