Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: YLgwBjkyyN0hku78HQDmWU2S30mMLfyPx3pVa6JUjgo=
Subject key identifier: 17:64:DC:A0:88:99:A2:E5:D7:99:B6:6D:80:16:4C:72:87:66:C3:33
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 01988CFD4AA750161B41E4B4FE9C06AF7EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 02FE
Signing time: Sat 09 Aug 2025 04:01:06 +0000
Manifest this update: Sat 09 Aug 2025 04:01:06 +0000
Manifest next update: Sun 10 Aug 2025 04:01:06 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: ea2I1sLcMoxHuF5yX/R3sDmiRwdrbaMTVtZKNWUFq50=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:4a:a7:50:16:1b:41:e4:b4:fe:9c:06:af:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Aug 9 04:01:06 2025 GMT
Not After : Aug 10 04:01:06 2025 GMT
Subject: CN=1764dca08899a2e5d799b66d80164c728766c333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:c0:b7:be:42:e6:a7:e9:c9:37:85:88:a9:
d2:be:34:81:4b:2a:0c:8b:53:6b:dd:42:5f:5b:56:
ef:b2:e5:8f:e6:ce:63:7d:3b:11:3b:16:c1:c1:11:
92:1c:2c:16:8b:d3:cc:ba:b4:00:9a:e8:40:b3:1b:
8a:a1:8b:47:ea:9c:b7:b2:b7:c1:ff:ac:cd:4e:f2:
17:08:b6:65:66:01:e8:e4:ae:b1:bc:f2:63:1f:b0:
21:7d:96:05:70:f1:0e:34:02:04:9d:6f:f2:e0:04:
b8:cc:e7:09:c1:1c:43:85:08:c1:04:b8:ee:7a:61:
7f:9b:f9:17:91:1a:97:e9:e3:fa:1f:86:bf:99:f2:
1e:70:94:6c:73:10:1f:31:70:57:c8:f0:5b:e4:a1:
b3:32:9d:52:7b:db:c9:89:90:9a:97:4d:3f:01:d3:
bf:3f:b3:c9:08:80:81:72:26:26:95:4d:ca:7c:89:
f5:1c:31:65:ed:a3:2b:8a:67:cd:a7:c4:54:65:30:
2c:68:dc:13:45:bf:6f:18:8b:ef:32:dd:b5:0e:8f:
f7:b6:18:9c:d3:85:45:f6:08:ec:5e:c2:c5:3d:f0:
f3:78:71:46:1e:b0:2a:c8:ca:af:80:06:51:be:80:
38:41:1f:da:a9:74:f9:89:83:d0:22:47:51:d3:ee:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:DC:A0:88:99:A2:E5:D7:99:B6:6D:80:16:4C:72:87:66:C3:33
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:19:66:fd:c7:f0:9d:42:99:4f:58:28:b8:cb:66:1e:a6:34:
fa:eb:d0:3e:79:46:fa:7b:a5:26:87:a3:46:46:15:27:43:5b:
0c:c5:78:a7:e1:f9:3d:94:8a:7e:5d:8c:4a:1a:ae:da:d4:f4:
79:9d:85:91:60:5f:69:fc:b9:f1:00:95:8a:8f:a1:1b:dd:e2:
20:71:a8:99:5d:a3:a8:cd:4b:5f:97:98:40:d9:59:d0:1e:a8:
fb:6d:07:09:62:ba:a2:04:4b:7c:da:1a:71:80:77:ac:35:50:
a7:12:d8:a3:c5:13:97:e9:3c:fd:ae:b5:d6:6f:ad:fa:4f:13:
3d:a2:4e:7c:5d:70:40:3e:11:66:e0:d0:2e:77:ed:22:b9:d6:
8f:e9:e7:8f:20:94:21:1e:58:31:db:8c:3d:56:34:5a:3b:ba:
6f:cc:04:c2:1e:fd:be:70:80:ee:a8:b7:eb:a0:96:1f:2d:91:
45:8a:55:87:8a:3c:16:7d:06:41:7f:b6:2f:d7:ae:3e:e2:4e:
01:78:9d:9b:b8:0e:8f:fc:a7:80:2d:9c:7a:0b:90:fa:56:ee:
51:59:e6:89:49:55:58:af:14:f6:9f:2a:4d:02:8f:bc:1f:a3:
13:20:60:65:37:a9:53:dc:22:d7:4d:e8:00:c4:15:19:2a:6c:
df:b2:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:49 2025 by rpki-client