Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: HEdnS7+REK201AJ5fum5NNagksQq5eSvZPItC7PhG/4=
Subject key identifier: 7D:D2:9E:B5:B9:4E:47:D9:96:D2:BD:53:45:E3:59:5E:B2:D4:9E:93
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0198793B58D22814961440AD329025F9EA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1009
Signing time: Tue 05 Aug 2025 07:56:29 +0000
Manifest this update: Tue 05 Aug 2025 07:56:29 +0000
Manifest next update: Wed 06 Aug 2025 07:56:29 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: VP6p5JTKve/QLRbz+7zmuNWccxTDfqQSGGk+bV8S32c=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3b:58:d2:28:14:96:14:40:ad:32:90:25:f9:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Aug 5 07:56:29 2025 GMT
Not After : Aug 6 07:56:29 2025 GMT
Subject: CN=7dd29eb5b94e47d996d2bd5345e3595eb2d49e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:ba:54:25:0d:26:1e:9c:3c:1a:9c:1c:90:
f5:c3:80:e3:95:b8:55:7e:79:86:15:6c:e4:d3:0a:
f9:f5:d2:d3:d4:45:38:15:0c:c0:3d:29:40:dd:7a:
13:58:39:fb:c4:4d:13:87:26:43:2f:77:e2:73:6d:
c3:af:6a:1c:6f:a4:52:91:1a:1f:a1:52:07:71:02:
f9:2a:3d:99:f4:a5:fa:ef:d2:f8:25:33:f0:23:3c:
58:15:98:d1:2c:c9:4c:ba:59:3c:b3:69:61:cd:2d:
0b:02:b6:2d:08:e7:23:27:34:44:8e:9f:5e:17:4b:
73:03:ba:15:79:16:f6:4e:a3:13:3a:34:ad:ca:20:
e7:0a:b3:5a:a8:8c:44:26:72:1b:6d:ce:46:fc:96:
13:bb:0d:d1:4f:29:cd:93:41:c0:a2:37:a7:f1:5a:
ac:69:d7:24:36:3b:79:24:b7:0d:9e:c0:36:9d:63:
74:2f:d7:12:57:53:73:21:46:43:d5:2b:ab:e0:73:
51:30:82:ee:e0:7d:5d:c3:24:ef:c0:d5:b8:d5:78:
2f:de:e3:f0:8f:02:96:1e:24:eb:9f:39:31:1d:17:
f0:9d:62:ea:69:5c:a4:d2:0e:7f:73:c0:95:66:43:
6f:18:6b:25:d4:d7:6d:62:86:42:6a:bf:0d:a1:26:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:9E:B5:B9:4E:47:D9:96:D2:BD:53:45:E3:59:5E:B2:D4:9E:93
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:91:bf:4c:32:6c:5b:67:84:54:55:e0:93:e7:19:c6:d0:
80:ed:17:59:3c:e7:98:85:d7:84:26:a5:13:85:91:f4:54:38:
aa:cb:07:0a:a4:77:b5:29:ec:2e:12:04:67:f6:3b:d7:33:01:
dc:0c:8a:c6:2b:71:ee:4f:24:3d:c9:7b:56:44:0f:5d:41:f0:
2a:d0:c5:32:04:f9:a7:98:12:b6:9e:d4:aa:6a:20:ed:55:98:
6b:f3:03:ef:57:01:ed:6a:73:db:af:f8:85:c6:64:39:bc:02:
a8:c9:d6:ca:7b:02:63:29:ba:18:51:0c:1b:0f:aa:7b:99:b1:
8e:14:a6:6f:ba:9d:90:cd:f3:7f:f5:34:a6:eb:4d:8d:39:b6:
50:e3:9c:cf:e8:73:1a:07:fe:0d:59:62:35:a0:11:a7:d9:03:
4f:2e:5b:cb:a3:90:06:c8:ae:9e:fb:03:bb:b4:94:7d:d3:78:
aa:53:ff:14:89:ee:98:f1:ac:14:de:5d:b0:8e:4e:ec:6d:6b:
43:b7:82:d2:6e:fb:c4:8c:ea:1f:68:11:73:ef:35:b6:b0:13:
a6:6b:6f:db:87:06:a5:3a:f3:68:81:02:ee:b2:00:20:9d:b1:
c8:bd:46:9b:0f:48:30:12:24:ea:b4:97:9d:8c:a1:3a:de:e6:
77:ff:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:02 2025 by rpki-client