Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: YVkbf8WVF/X6Kz2rZ2xoMfLDKet1nHurNAPm2k0QOl0=
Subject key identifier: 6C:CF:EF:8D:BA:F9:CF:31:35:A4:AC:6F:20:AE:50:BA:FB:FD:80:6D
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 01988C8F1BE7AE1D72B7F9CD89C516A68505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 02:00:45 +0000
Manifest this update: Sat 09 Aug 2025 02:00:45 +0000
Manifest next update: Sun 10 Aug 2025 02:00:45 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: F7XhuUAYmKWMeUjJQYtgmpmSjFTUh3I01DjsvslHpTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:1b:e7:ae:1d:72:b7:f9:cd:89:c5:16:a6:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Aug 9 02:00:45 2025 GMT
Not After : Aug 10 02:00:45 2025 GMT
Subject: CN=6ccfef8dbaf9cf3135a4ac6f20ae50bafbfd806d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:0c:8f:bc:8d:ea:d8:b5:a3:84:fb:6d:7b:
38:cf:92:e2:fc:53:81:21:27:8f:c5:3a:a5:28:45:
e6:8d:3b:51:ba:07:ac:d8:ad:eb:54:8f:1e:96:a1:
3f:26:7d:7d:97:57:73:49:92:8c:80:ec:ec:20:f6:
de:49:8d:11:7b:fa:80:c5:13:b4:38:59:7e:ba:ff:
4f:08:52:9f:85:d7:94:5e:89:80:4f:21:2c:f5:8a:
cc:a7:42:81:95:61:8b:05:bc:cf:3b:1b:31:aa:fd:
ff:8a:63:fc:21:b4:a0:b2:04:79:a5:35:e4:84:13:
c3:6f:dd:c7:5c:b9:04:fb:44:41:c6:70:38:65:93:
79:57:8a:2c:fd:ea:eb:c4:fa:c5:ce:84:3a:f2:55:
ab:66:87:55:db:70:f2:ed:54:63:0d:c6:3e:28:7d:
4d:73:5a:ba:a5:05:2f:ec:83:6a:7a:06:2d:d1:13:
04:15:0d:a2:bb:88:70:2f:51:64:f1:e1:ab:14:61:
b9:bd:c2:c0:a3:fc:e6:13:6e:5a:9d:ae:5b:78:14:
ff:ef:37:fc:09:b4:4d:f0:a7:86:1b:92:e9:38:25:
dc:a9:4b:49:26:c2:bb:88:a1:1d:5e:3f:61:be:3e:
88:c2:10:d1:d7:8d:7e:33:82:08:82:62:ec:86:d9:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:EF:8D:BA:F9:CF:31:35:A4:AC:6F:20:AE:50:BA:FB:FD:80:6D
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:b5:c9:3c:ea:39:89:6e:9d:c9:fb:db:59:6d:07:41:b9:
46:04:b6:4e:a3:99:e7:a5:e9:bd:bb:9e:65:40:e0:69:4a:8a:
87:56:70:e4:8a:e8:14:5b:4b:bf:f1:e5:ca:31:a8:76:53:81:
8c:14:5a:b5:3c:1b:05:9c:9c:7c:5b:34:1c:6c:55:dd:65:42:
aa:f7:84:9e:cd:e7:5c:d2:f4:b1:54:eb:8d:35:8b:8a:f0:a6:
9b:2b:eb:5a:fb:ac:26:52:6c:f1:18:3b:05:22:9d:cd:04:a2:
f9:20:43:9e:0e:71:46:2c:05:e7:c2:82:a1:11:b6:05:e6:6d:
77:e9:e8:e0:5f:d5:81:c3:12:64:1e:97:6c:44:f7:9d:27:ba:
9e:2d:18:30:ff:38:af:91:85:98:a5:3b:c0:68:d9:26:0e:9e:
3c:5f:32:ce:48:55:ef:b2:c7:ea:e4:35:58:78:91:b3:24:33:
ef:83:c9:59:fd:94:f4:9e:f6:91:b3:2f:da:bf:a8:23:8a:28:
0b:17:b7:a1:31:77:58:92:80:c5:06:bb:7d:62:aa:ae:e0:1b:
4f:8e:bc:89:50:9c:7b:17:85:8b:fb:68:84:9f:05:5a:52:6d:
df:9c:72:47:3c:c4:74:00:02:9d:76:8b:6a:b5:bb:11:2d:40:
31:d6:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:02 2025 by rpki-client