Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: iH/21HMfKmJuMypI+K7lEiPPo/hlwstiZEQSLHi2CXI=
Subject key identifier: F5:E4:B9:27:60:E3:B9:BF:73:B4:B7:43:D8:B0:74:26:75:72:9B:69
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019874874AD6572DF1A9359102185F685E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:01:20 +0000
Manifest this update: Mon 04 Aug 2025 10:01:20 +0000
Manifest next update: Tue 05 Aug 2025 10:01:20 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: NJd6TjK6txDMvHcMj103JAgK4bymsg9i/p8b03GoCTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:4a:d6:57:2d:f1:a9:35:91:02:18:5f:68:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Aug 4 10:01:20 2025 GMT
Not After : Aug 5 10:01:20 2025 GMT
Subject: CN=f5e4b92760e3b9bf73b4b743d8b0742675729b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:96:fa:30:b7:70:f3:20:01:23:e7:d5:33:
33:4c:e5:73:f0:45:f6:98:a8:5d:db:18:70:d5:0a:
3d:5c:32:d7:c1:cd:70:bb:3b:75:15:2f:6e:d9:05:
68:95:84:ac:b6:a6:c2:4b:64:a1:5b:ca:a7:6e:3a:
09:37:10:16:0a:68:40:b0:f0:ea:b8:97:f1:aa:57:
51:8f:64:78:4d:26:da:1c:e1:2f:00:aa:12:b1:74:
cf:7f:e2:f3:44:23:87:16:dc:35:a9:1a:c9:5b:25:
08:ea:99:2c:01:60:fe:85:6c:bb:cc:85:72:73:87:
10:00:9d:2e:0f:49:4d:9c:88:75:e9:09:0f:a1:d7:
a4:fb:a6:70:a8:ca:ed:9e:30:c0:3e:4f:01:cb:3f:
77:7b:01:d5:70:00:ce:11:30:8d:14:23:31:62:5b:
d4:5b:a0:f6:4d:fe:7a:b5:31:da:b0:90:b4:30:05:
d2:35:6c:88:72:68:7d:fa:5d:64:0d:67:04:a7:67:
d9:8c:ee:ef:07:9e:d4:10:98:b5:66:6d:be:da:e3:
03:14:61:56:e7:3c:c6:16:85:b0:99:8e:a2:15:77:
6e:d9:2d:f0:ef:cb:f0:94:11:4a:06:3f:2b:4e:cf:
a3:96:c5:27:b3:81:7a:0f:e4:b7:b6:0b:78:41:3c:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:B9:27:60:E3:B9:BF:73:B4:B7:43:D8:B0:74:26:75:72:9B:69
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:c4:69:2d:ed:35:32:75:31:6a:a4:a0:3e:6d:0a:cc:7f:
64:02:a8:39:93:88:f5:ac:4e:b5:2e:84:a2:20:81:b2:79:81:
40:83:d4:d3:d7:fb:84:41:e6:be:77:de:8d:0a:27:32:d6:ea:
05:a6:e4:6e:f7:74:8e:8f:d2:ef:70:4a:2e:06:45:70:44:c5:
23:77:a2:f0:eb:42:5b:55:7c:de:98:b6:89:9a:a3:f7:42:f5:
12:a8:9a:f4:2d:0c:b4:60:70:05:7b:5c:d6:7c:6b:ba:bc:96:
5f:e9:b7:af:69:ae:28:d4:c4:2a:71:36:e7:54:18:7f:60:9d:
66:d8:ff:6f:fa:56:d5:44:06:ee:0d:6a:5f:f4:44:af:6c:c1:
e1:dd:52:0f:64:6c:90:6c:37:8f:3c:ec:ab:57:a3:1a:cf:5f:
e4:bf:78:de:37:52:e9:d4:c8:e4:23:4e:be:d1:cf:4b:5c:95:
a9:8c:ad:f7:60:8d:b9:dc:5b:78:7b:ad:28:11:18:10:3a:b4:
51:98:59:98:60:c1:c4:c9:c3:97:98:8c:60:5c:3d:21:40:e2:
fe:0c:e8:4f:b2:18:cc:2a:e4:8f:28:0f:0d:05:ae:04:ba:d2:
32:5c:cf:6d:b8:63:74:93:e0:85:08:e0:9e:b1:75:e8:69:15:
3b:4a:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:09 2025 by rpki-client