Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: zPgrHjCa67i+5H7s/1ouYSn7bFBuGYVzlfpir3f7hQM=
Subject key identifier: B9:EA:92:A0:29:48:A2:55:2B:70:73:33:E5:40:C6:2B:7C:94:21:BD
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019873E2E5A89AD9F2152731BEE50072F0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0AD2
Signing time: Mon 04 Aug 2025 07:01:46 +0000
Manifest this update: Mon 04 Aug 2025 07:01:46 +0000
Manifest next update: Tue 05 Aug 2025 07:01:46 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: +v/wi+qGZyrNfxn7ChnVq45d/KRFep0YAPRMIV0Gsy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e5:a8:9a:d9:f2:15:27:31:be:e5:00:72:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Aug 4 07:01:46 2025 GMT
Not After : Aug 5 07:01:46 2025 GMT
Subject: CN=b9ea92a02948a2552b707333e540c62b7c9421bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:ea:1d:31:4f:3c:91:d8:72:1e:ee:2c:56:
3b:b6:cb:b9:02:bb:d0:c0:57:cb:4f:b8:6b:d6:e5:
9a:87:18:46:70:78:4b:e7:3b:57:20:e4:41:22:76:
26:0f:93:b1:94:53:42:4a:90:0d:8c:93:f4:ce:b0:
46:cd:c3:e3:ae:5c:1f:97:80:d5:93:ba:f0:1f:f3:
b2:b6:3e:33:90:f3:fc:46:29:60:e2:28:fc:41:3c:
1e:33:45:ab:dd:b4:29:cd:b6:6e:04:b3:45:f4:ff:
c7:76:05:65:22:c1:b8:a8:d7:15:35:62:9c:23:b8:
4c:48:08:a8:dd:21:05:64:1e:7c:17:07:68:ec:0a:
e9:fc:17:98:0b:9b:55:19:02:b9:d3:53:21:e9:7e:
6b:d2:89:67:1e:ed:ef:af:e7:ee:71:9f:94:b7:0f:
eb:b2:72:39:c9:8c:e7:01:08:56:f6:4f:df:b5:e6:
91:1e:38:f7:98:cb:aa:93:99:e0:5e:81:a7:49:06:
43:6c:6c:d1:bb:3a:66:13:45:ab:fd:fd:7b:90:c0:
dc:58:98:26:7a:32:04:4e:43:89:78:ae:bb:61:51:
31:a6:70:7e:44:07:09:d9:77:f4:74:b8:95:39:e5:
18:6f:34:3e:fc:b4:27:e9:4a:f5:21:9f:a7:ea:4c:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:92:A0:29:48:A2:55:2B:70:73:33:E5:40:C6:2B:7C:94:21:BD
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:fd:3d:76:58:47:d5:29:65:b4:14:51:4d:c2:05:16:82:
fe:33:48:cf:f6:2d:21:4e:6b:dd:8c:f8:79:54:97:c1:f8:04:
69:19:cf:81:d8:52:db:d5:55:cf:2f:09:34:80:4b:75:dd:ce:
bb:8d:e1:cf:fe:31:60:1f:5c:30:36:d5:7b:ed:b2:b2:02:0a:
c1:b2:a0:99:3f:5f:56:d4:b2:f9:60:ed:7d:8e:b7:46:fa:56:
34:b2:96:b9:43:8f:79:8f:05:2e:40:cb:94:c9:32:83:2a:89:
97:17:9d:9f:cc:51:bd:7c:f2:73:25:e9:37:cf:49:49:8d:bb:
19:03:e7:9a:02:3d:cd:d2:ec:85:01:15:ab:ef:1a:51:73:94:
92:23:ce:5e:95:ea:ce:a5:76:66:de:e2:6a:05:2f:4b:41:0e:
b9:3f:52:54:e7:82:3a:93:3e:25:93:7f:b6:eb:e5:90:9d:8a:
ae:4d:11:f8:98:cb:73:04:33:d4:d5:c5:28:e5:9a:a2:83:ea:
24:df:1d:6b:86:d2:13:ec:cd:f1:85:8e:30:15:14:b5:9c:6e:
11:39:d7:26:fb:6e:07:e2:ff:c6:3c:61:f0:86:9a:c0:41:fe:
37:da:5a:5d:a0:a8:f9:2d:df:3d:63:96:af:1b:f8:dc:9b:ff:
cc:f6:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:22 2025 by rpki-client