Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: D776i6+uOtdaMipG2CXApBGmaQ/ZZR1/9bJHn8h8eNk=
Subject key identifier: BE:DD:F1:F9:68:96:69:73:05:BD:C5:DA:24:D9:57:3A:0E:D8:73:C5
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0198744FACE73E5C71FDD25052BFBE42924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1625
Signing time: Mon 04 Aug 2025 09:00:35 +0000
Manifest this update: Mon 04 Aug 2025 09:00:35 +0000
Manifest next update: Tue 05 Aug 2025 09:00:35 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: MffnwCyFAUN1cIu0hI8FbolAN24.roa (hash: EymH0H7Gnm80GdddcNjrz/YuHPOBFOgspnFOthB9pVY=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: 4/liHxvvawhjFeJ/tlmIRxeog0F6rSyht9hl6c2bH0I=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: rnDodB7s0gpQktHMSBT-hXUItaw.roa (hash: scf+UDgeFvA9fGqtgPdgrgkpCdxYh0GIU5nzCuRrgH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ac:e7:3e:5c:71:fd:d2:50:52:bf:be:42:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Aug 4 09:00:35 2025 GMT
Not After : Aug 5 09:00:35 2025 GMT
Subject: CN=beddf1f96896697305bdc5da24d9573a0ed873c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:3e:9d:73:ce:b8:fd:23:d4:70:24:f8:3a:
92:b2:bb:ce:4e:36:a1:c7:ca:48:42:20:33:d1:27:
c0:b5:77:16:06:6d:5e:a2:c5:01:ce:b1:62:07:a1:
33:c0:c4:c2:f5:1d:92:26:1b:85:3c:d7:73:20:03:
ff:27:a9:64:35:46:cf:3c:f7:bb:4f:4d:7e:82:aa:
0b:91:0d:17:44:69:3d:1e:fe:e7:31:1a:00:6e:6c:
a9:90:da:b3:84:a9:b2:af:d0:3e:db:e1:8f:b0:65:
83:1f:af:2b:c0:e0:92:ee:6e:0a:54:52:5d:16:e3:
b5:b9:64:55:58:3f:4f:ee:1f:f3:8c:6e:93:9f:c5:
d9:51:92:4e:d3:8f:a8:f4:93:0d:c6:0d:0e:73:34:
e5:d8:5d:f6:dc:2b:d3:86:6a:c2:b6:c8:39:ca:62:
6d:e6:e1:b0:33:bb:10:88:b8:cb:fa:3b:84:d0:92:
3a:65:a8:cc:d6:d4:21:ef:84:52:92:04:d4:a6:02:
88:0b:e3:1d:ad:c0:93:9d:3c:29:fe:ea:42:de:e9:
67:c0:c9:5d:15:c6:56:70:18:0f:37:ce:f7:f5:e4:
fd:f9:76:58:0b:50:af:1a:ca:27:4b:fd:bc:ee:3d:
30:a3:b5:28:59:fa:58:06:b6:43:2b:6b:98:d5:1d:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DD:F1:F9:68:96:69:73:05:BD:C5:DA:24:D9:57:3A:0E:D8:73:C5
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:0b:8b:9a:29:ae:cc:91:a7:7b:55:b4:b6:61:2d:db:16:
51:7d:84:4b:e5:d2:1f:a2:1d:3c:e7:8d:96:7b:c0:ab:b6:39:
ea:9c:19:ea:55:f7:30:82:2c:fa:46:d4:7a:3e:31:02:fd:f8:
a1:90:8d:9f:65:b3:fa:03:77:a5:77:3e:08:21:57:89:99:8c:
25:dd:c4:6c:ce:65:de:4d:e0:41:97:14:20:1a:f1:35:52:8a:
a9:a9:52:01:47:f2:41:f9:23:23:1d:f7:0e:34:84:b9:9c:45:
80:7b:01:de:4e:c1:1d:02:30:ad:ff:46:52:bc:ca:91:31:da:
0d:d6:15:3a:bd:b8:ef:7c:8b:bb:a8:ea:a6:03:09:7c:6a:46:
3f:db:d8:de:6a:36:f6:49:7d:db:52:15:33:d2:be:77:88:96:
56:8c:b4:37:43:5d:fd:7b:b7:6f:d8:4f:c4:8c:35:5a:c0:4d:
25:88:ac:f2:f9:b4:48:16:90:e6:54:f5:78:ee:a3:b1:cb:1f:
b8:b0:49:01:b6:ba:fc:1d:1f:57:5d:e8:fd:7b:15:1b:76:81:
9b:0f:cf:ef:52:f5:35:93:f7:17:87:bc:e3:5e:70:4e:87:8b:
fe:49:a8:8e:ed:95:73:f9:ac:90:a7:51:35:b2:1b:8a:84:bd:
2b:f6:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:54 2025 by rpki-client