Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: kymmVMLJy7xazWKcG7/m9tyT6t6/7QYzIx8bQnIJ7fQ=
Subject key identifier: 31:92:25:11:91:40:3F:FE:2E:E7:5C:7D:D1:57:4B:8B:0F:05:30:F1
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019882796618DC2617D5B4CE0E55BEE37AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 11A0
Signing time: Thu 07 Aug 2025 03:00:50 +0000
Manifest this update: Thu 07 Aug 2025 03:00:50 +0000
Manifest next update: Fri 08 Aug 2025 03:00:50 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: vlzzfs9mrBan2EiAeHns44uFnlHQvcsoKiFPLqiKJVg=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:66:18:dc:26:17:d5:b4:ce:0e:55:be:e3:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Aug 7 03:00:50 2025 GMT
Not After : Aug 8 03:00:50 2025 GMT
Subject: CN=3192251191403ffe2ee75c7dd1574b8b0f0530f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:c1:74:68:53:76:54:6c:9c:10:52:28:77:
f8:c1:b6:b3:3b:3d:15:38:96:59:44:0f:76:20:25:
01:38:80:a5:0d:9d:3c:06:7c:b5:ee:67:55:15:94:
90:62:09:56:1a:a3:c7:a0:d9:4c:78:9b:21:50:03:
97:a2:e0:de:48:a5:e5:8b:7e:87:ea:ed:24:ee:bf:
22:11:fd:fe:92:11:77:6d:90:21:67:ff:2f:7d:01:
9f:2b:82:ea:0a:eb:4d:0e:6f:fb:44:6a:65:48:61:
b7:fa:a0:4d:e9:ce:a6:d9:57:29:47:3c:55:27:a7:
d7:6e:88:4e:db:99:a9:f7:ac:fd:b0:ab:15:16:aa:
10:c9:48:aa:98:23:1e:5e:ca:2a:e1:3b:e3:f6:6b:
8a:85:9a:bb:d9:a0:67:63:e3:22:27:53:c1:da:9e:
a1:d5:85:20:37:cb:45:b2:b6:66:c2:10:f1:72:bf:
a4:58:23:8f:d2:9b:1c:96:20:f5:7b:06:f7:f3:5d:
27:e0:cc:2b:b3:c5:28:4d:43:f9:f5:26:7c:1d:d8:
bc:12:5a:50:8a:46:b4:00:d9:71:d3:62:ee:64:5f:
9b:48:ad:e7:01:4d:10:cb:62:ba:83:27:68:76:f1:
49:0c:7c:ad:3e:43:15:cb:8d:90:1c:5c:f9:26:8e:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:25:11:91:40:3F:FE:2E:E7:5C:7D:D1:57:4B:8B:0F:05:30:F1
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:09:4d:80:cb:40:9b:8b:03:0d:62:83:23:31:c0:a2:a1:
73:b7:45:6e:a9:21:98:19:9e:05:78:0b:37:28:99:03:8a:99:
43:43:46:71:6f:aa:5a:0f:ae:3d:19:c3:32:36:a7:0e:d1:b2:
b4:99:a2:e9:fa:f1:60:86:7b:a5:80:11:b2:6d:58:9e:f0:e3:
8c:94:bb:d6:28:90:0a:c9:ba:72:6c:82:4e:6d:fe:2b:e6:3e:
5e:37:21:21:bb:19:ff:4f:24:a2:89:f0:94:e9:91:d1:21:1d:
29:b4:77:dd:38:52:a0:ab:20:8e:2b:41:40:1c:bb:40:5d:91:
ff:c4:42:bd:a3:79:2f:8e:66:5f:0f:13:15:d2:e3:76:1a:0c:
ac:65:4c:84:fd:dc:f4:31:4f:3f:41:5d:00:92:0d:5f:5d:d2:
b1:fe:b2:8b:b8:71:27:4d:e9:70:61:dc:9a:66:16:b1:f8:53:
bc:bf:29:f8:77:ae:f3:1f:21:fc:d6:fc:1a:3e:60:8b:db:60:
ca:ee:87:63:79:f1:4a:89:d0:06:c8:44:df:b0:a8:29:ea:d9:
36:f8:ed:4c:c4:75:ae:78:56:d6:b3:24:a6:d0:f5:9c:72:1c:
02:f1:5b:20:f4:69:6e:f1:76:3e:75:a3:46:20:d6:b0:e6:ed:
02:cb:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:10 2025 by rpki-client