Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: 1jpuo/qd7nI/dAh6ORC2PyzDUdwCK0hJFMFyhHwM97w=
Subject key identifier: CB:C0:99:84:5A:7E:97:CA:AF:28:25:67:26:AB:C0:71:DC:98:FF:04
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 01988D6B8F45098FFCFF454627E46B07BCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 04B3
Signing time: Sat 09 Aug 2025 06:01:33 +0000
Manifest this update: Sat 09 Aug 2025 06:01:33 +0000
Manifest next update: Sun 10 Aug 2025 06:01:33 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: VM2gk5spZb9bp//NazaVBxNiOFfcY7IZLJuQkgcyHeQ=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:8f:45:09:8f:fc:ff:45:46:27:e4:6b:07:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Aug 9 06:01:33 2025 GMT
Not After : Aug 10 06:01:33 2025 GMT
Subject: CN=cbc099845a7e97caaf28256726abc071dc98ff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:c5:58:dd:25:10:e2:0d:20:3e:9d:f6:17:
37:2f:43:d3:ae:37:ce:34:f3:0e:09:bf:a9:6d:a2:
f2:d4:c0:47:6e:48:b9:65:4d:2b:da:e5:c4:e2:aa:
cb:84:71:bd:57:0d:e1:77:18:6c:5a:2a:13:cd:4c:
f0:1f:d1:32:7a:b0:ca:27:cd:0c:a9:da:8a:6d:0a:
1f:1e:23:6d:64:44:73:f6:db:ad:87:4d:ea:be:a8:
3e:f1:2b:06:6d:bb:61:72:b4:a8:60:69:a0:cc:34:
5b:ec:3e:48:8f:21:22:9f:e5:76:e5:63:79:ed:a1:
49:b1:74:64:d5:8b:52:77:5b:ed:8f:c1:e2:12:1a:
5f:d8:a6:5c:0b:75:d8:23:41:2f:c2:4e:08:60:95:
ec:17:28:21:16:66:cb:f2:8f:bf:0c:f4:61:e3:a2:
f7:06:9d:79:db:d8:fb:ac:b2:30:97:db:76:0e:ae:
53:83:47:6f:c0:2c:9d:ea:8a:6a:cb:ba:c9:08:21:
c6:c0:75:10:0c:10:4f:4a:8b:9d:14:93:cd:dc:b2:
ba:f7:7e:bd:35:ff:c9:8e:7d:8d:52:c9:5c:e6:88:
eb:f3:c9:2d:bb:6d:47:6f:1f:63:8c:b3:07:64:3e:
6f:fb:8e:65:7f:f4:3a:32:78:a9:1b:db:de:10:c4:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C0:99:84:5A:7E:97:CA:AF:28:25:67:26:AB:C0:71:DC:98:FF:04
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:22:43:58:ff:b1:c5:17:da:c2:b7:d1:c9:eb:8a:59:5f:69:
aa:53:a5:24:31:a6:02:03:11:28:65:cf:2f:d3:7c:c3:a8:24:
d2:ec:34:02:57:d6:e8:a4:02:ad:ad:f7:9a:4a:16:0b:14:61:
62:80:ab:26:68:9b:bb:39:5e:6c:1e:7c:e3:fb:c3:da:80:e6:
8b:93:6f:1e:6e:a8:35:3f:d4:74:eb:c5:5f:c3:dd:23:4a:9e:
51:26:05:4a:13:8b:df:be:af:d6:b5:77:11:c0:57:88:2a:10:
10:f9:f0:65:6b:d7:be:a8:ba:7b:e6:69:d8:6b:93:43:fa:ce:
47:5c:dc:4b:86:d7:e9:fd:63:fe:ff:bd:35:55:38:0f:74:30:
1e:86:0a:be:96:74:3f:c5:9a:33:6c:53:64:4f:2d:05:92:34:
30:f5:b6:56:c8:6d:ec:9a:5d:b8:93:ba:c8:8d:c9:dc:80:a9:
4c:74:04:4c:d8:7f:04:27:76:5b:c9:c8:bd:2b:21:d0:c9:a2:
4c:6c:4b:7b:8d:d4:13:d2:08:da:05:dd:3d:ac:b9:69:ef:ed:
13:a5:22:27:6b:bd:05:82:b4:f8:2e:c1:ae:71:16:c3:9e:8f:
33:96:81:9d:8b:ba:d0:a1:9e:ce:59:c3:65:7b:64:c3:ea:fd:
13:f5:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:47 2025 by rpki-client