Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: Ur68gmEj/aAYMGlGRGnwTajJCNfiD8ql+sO9vEXMNNc=
Subject key identifier: A8:76:18:A3:9D:17:0F:F2:AF:C0:A4:D0:21:B0:84:37:86:5A:FA:D1
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019892C7D1000D1CCA2BEED15BC194734EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 07:00:25 +0000
Manifest this update: Sun 10 Aug 2025 07:00:25 +0000
Manifest next update: Mon 11 Aug 2025 07:00:25 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: GEUt6Cj8jPaM6vYl+pm9WRpXCowJ30v0CelDPNJ04gQ=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:d1:00:0d:1c:ca:2b:ee:d1:5b:c1:94:73:4e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Aug 10 07:00:25 2025 GMT
Not After : Aug 11 07:00:25 2025 GMT
Subject: CN=a87618a39d170ff2afc0a4d021b08437865afad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:dc:03:46:53:ca:e1:e5:71:4b:06:85:c7:
00:c5:32:ab:c1:ab:df:fe:e2:db:7c:f7:6f:26:bd:
5e:f0:4f:aa:da:78:05:d0:4e:78:b1:ce:15:a3:04:
e6:f5:5d:30:9a:03:c2:5f:28:3d:a2:a2:f6:8f:97:
83:34:d7:eb:5e:10:f2:3a:3c:f9:35:4e:45:9a:76:
f9:25:e9:a0:d8:a1:d6:cf:77:f0:20:e9:02:1b:20:
7c:5e:4c:9c:54:af:98:1d:8c:5c:ec:f5:b7:68:02:
d7:a4:91:2f:ef:2c:a9:6a:7a:af:b2:bb:a3:f4:26:
4a:9b:0c:43:04:bf:61:4f:ce:ee:82:6b:14:8f:14:
58:59:93:1f:3c:a9:b8:78:09:fc:7c:83:00:a5:80:
93:e3:9e:1b:21:cf:16:8e:ef:ab:e8:38:17:09:ff:
be:1b:cc:30:2e:5c:b5:d6:0d:0d:20:90:8c:31:a2:
11:74:6d:87:89:29:a8:e8:fa:f9:76:f8:99:ae:a7:
5e:a5:24:f7:cc:5f:83:28:56:c6:5c:a5:68:dd:f6:
96:b2:a6:ac:93:40:e6:c3:33:f7:1b:00:16:ba:99:
a5:3c:b1:1a:bd:a3:95:e3:2f:16:01:d0:5c:d8:aa:
ee:7c:d6:35:b5:3d:81:4a:07:fc:8b:92:d4:92:78:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:18:A3:9D:17:0F:F2:AF:C0:A4:D0:21:B0:84:37:86:5A:FA:D1
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:ed:d9:5a:87:7b:c0:78:a2:6d:2d:a9:b0:ca:f3:1d:ff:
05:10:f4:db:70:c1:36:87:fb:d7:a4:e1:f5:2a:19:e6:c4:4d:
bf:00:ef:36:7a:7b:4c:9f:8e:a9:3c:40:cd:7a:d4:18:bc:31:
21:5a:36:ea:ab:17:b5:f5:09:2a:dc:82:fa:08:0e:9f:8a:24:
fc:a8:1b:46:a4:30:f6:8a:2d:d2:e0:d3:c3:b0:bf:f3:bb:fc:
8f:7b:3e:1f:10:65:48:31:97:e4:a3:0d:6e:6e:8e:ab:14:7b:
92:58:86:5d:f7:86:83:51:87:8a:22:b8:ce:89:29:90:fd:33:
31:5f:fa:32:c1:b9:52:72:dc:b7:18:70:32:88:23:0b:74:31:
19:60:28:b8:8f:97:b7:7f:f2:c9:67:67:a2:71:a3:cd:21:5b:
4b:94:9f:f1:6b:c5:69:07:6f:78:da:9b:38:cb:ba:3b:e6:5a:
a4:f9:61:d3:e9:04:b9:d2:d6:48:0f:38:04:f9:0a:76:d9:18:
59:40:e8:e1:bc:46:f3:fa:e6:d3:2e:16:01:9b:08:dc:a2:2a:
a5:5c:df:6f:80:e1:3a:76:39:81:81:32:d9:3a:9e:0b:a9:77:
d0:b2:3e:3b:fa:d0:5c:0c:f6:b6:f2:ff:fa:fc:9e:b5:45:50:
83:cc:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:46 2025 by rpki-client