Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: Sh34ziWlGy1ykH8gZzlW3HlqUsWdNNTYMR47n/GlJwk=
Subject key identifier: 2E:63:08:B5:61:C0:CB:46:EE:5A:D8:84:0F:44:8B:74:6C:BE:D5:6F
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019872CF312B6B78B81331EE966134A17894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:00:37 +0000
Manifest this update: Mon 04 Aug 2025 02:00:37 +0000
Manifest next update: Tue 05 Aug 2025 02:00:37 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: 59aDFxMOm0j7+Bza2/miINDOZvYsO/vbKiHa7YZEhoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:31:2b:6b:78:b8:13:31:ee:96:61:34:a1:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Aug 4 02:00:37 2025 GMT
Not After : Aug 5 02:00:37 2025 GMT
Subject: CN=2e6308b561c0cb46ee5ad8840f448b746cbed56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:b0:32:6f:65:7e:e7:81:f6:c5:bb:42:fd:
4e:2d:b3:2f:e3:35:a9:11:d0:70:ae:1a:bd:b3:ab:
f6:f4:c5:b8:08:36:db:24:f4:13:27:17:37:18:64:
70:75:dc:8b:a7:8c:00:c1:fb:be:99:43:b5:05:7d:
d6:00:2e:18:d2:0a:74:9a:49:96:bb:68:d6:c2:b6:
23:b3:f2:94:82:3c:67:6f:be:e8:ee:3a:f2:f5:25:
cb:84:5b:16:68:15:ab:78:35:21:32:6d:62:e8:34:
36:75:50:a2:92:69:b6:f7:85:91:f3:3d:73:c9:f7:
b2:91:2f:46:25:9d:b8:5c:33:69:0d:a9:f0:0b:7c:
03:66:5b:12:4d:7c:44:cd:af:a0:be:52:e9:24:b6:
a6:6d:24:0b:71:d4:ab:c9:33:09:bd:d6:4d:16:d8:
26:14:ba:ca:3a:71:d4:41:f2:d3:7f:d7:8b:28:98:
22:61:56:8f:d1:e9:35:33:84:85:4f:48:9f:db:8f:
e0:19:59:ed:e5:a1:d7:3e:cc:ff:d3:8d:9f:b6:25:
f3:f3:0e:19:45:46:50:46:54:21:8c:2e:f7:ca:6f:
69:51:e6:e2:28:14:30:8b:8e:84:2a:ef:7c:d7:1b:
f8:7a:ed:44:7e:48:eb:bf:fc:32:50:03:04:04:b2:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:08:B5:61:C0:CB:46:EE:5A:D8:84:0F:44:8B:74:6C:BE:D5:6F
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:4a:b6:11:4e:9f:d1:54:d4:98:60:32:09:d7:27:88:b5:
77:5f:00:8b:9c:2c:48:8c:bf:a3:51:f9:f4:fa:ed:85:3d:5e:
bc:26:ce:16:e9:80:6f:1e:32:11:c3:05:1a:89:05:5b:94:ab:
ea:3c:96:fb:05:6f:d0:27:05:f6:28:a0:36:10:84:50:29:9a:
1b:8c:74:68:fb:60:d0:e7:c6:4b:d3:4a:80:5e:ec:a5:19:d1:
59:61:d9:07:8e:a7:b3:78:a3:36:b0:a4:f9:60:2f:16:77:51:
d2:76:8d:c8:ab:31:df:86:80:bd:27:32:ff:29:6e:0f:b3:a1:
87:83:86:4b:3f:fe:b4:dd:94:8c:e4:c4:05:b0:ae:ff:c7:68:
2f:a5:0a:b9:69:5d:f5:5d:45:c4:58:1a:f6:8d:b5:9b:d1:dc:
04:8c:38:5d:d3:7d:ca:d6:c8:1d:49:1b:5f:54:20:60:12:56:
96:42:f0:88:77:66:7c:67:6e:da:31:55:3f:a0:4d:6c:39:05:
a1:90:94:1c:b3:db:04:77:b3:9a:12:97:6e:7f:a1:d7:17:fc:
2c:03:98:db:05:2a:78:d1:37:5d:9a:90:e0:63:7f:a4:35:0e:
25:1b:d6:ff:2b:6a:e2:74:51:d8:72:a1:4b:8c:04:05:b0:5f:
71:b1:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:29 2025 by rpki-client