Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: JzfetFR8lMrmCCMxZLZUTvANS+nDcr50we9xprgGG5Q=
Subject key identifier: 96:EA:89:0D:65:91:AF:61:0F:59:98:2E:19:9D:0E:C2:DF:1D:FD:BC
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01987A5238B1712C790D6228796F74487386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0657
Signing time: Tue 05 Aug 2025 13:01:05 +0000
Manifest this update: Tue 05 Aug 2025 13:01:05 +0000
Manifest next update: Wed 06 Aug 2025 13:01:05 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: kw9nGNzb0OxaatHy8WeiDjjhnvajdorCcoQYdUvYIKU=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:38:b1:71:2c:79:0d:62:28:79:6f:74:48:73:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Aug 5 13:01:05 2025 GMT
Not After : Aug 6 13:01:05 2025 GMT
Subject: CN=96ea890d6591af610f59982e199d0ec2df1dfdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:73:b2:99:87:9d:30:ec:5e:47:22:70:96:
5c:50:79:b5:3a:7e:e7:51:15:b4:7b:55:b5:38:22:
43:67:40:d3:9c:52:a4:f9:c2:a1:5e:29:ea:ab:2f:
57:9b:27:f0:3d:7a:25:bf:db:ce:0a:bf:4d:c1:df:
28:f1:e1:47:a9:c6:86:9d:6b:8a:39:cc:0c:ac:d5:
f1:8a:fe:e7:d2:30:7a:f3:68:36:bb:e8:0a:6f:de:
60:09:f4:a9:f8:8a:4c:44:3f:e2:96:81:ab:18:5b:
1e:5b:b5:af:5e:26:02:57:63:43:31:a6:5d:84:9d:
3f:c7:12:97:2b:1a:bb:c2:76:e7:3a:59:8c:5b:7f:
97:3b:19:1b:3e:42:d6:57:c3:08:df:b8:24:d8:bb:
be:aa:35:95:ae:b9:a7:f1:5b:b6:71:8b:61:38:40:
9d:27:4e:36:ed:ee:3b:51:c2:4e:07:a8:05:56:1d:
73:7e:db:e5:a2:d7:fb:66:6c:03:bf:d6:91:97:64:
33:c7:0c:17:9f:33:bc:d6:fc:29:eb:ed:ba:1b:27:
48:ff:56:93:7e:a3:11:a7:68:fc:84:5a:83:fa:07:
85:91:d6:f6:c3:90:d6:fb:f6:4d:44:06:2c:c6:0d:
94:4b:08:ad:82:48:63:e9:77:9e:5c:56:47:1e:bc:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:89:0D:65:91:AF:61:0F:59:98:2E:19:9D:0E:C2:DF:1D:FD:BC
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1a:bb:8e:85:93:62:bc:62:a7:ff:9a:bf:8d:66:27:d1:76:
db:72:10:a0:89:46:83:63:bd:8f:ee:6d:03:28:6f:59:d5:d2:
47:52:6a:0a:9e:0e:5a:3b:46:05:7f:b4:4c:ea:7e:f0:14:dd:
6d:d6:7a:1d:83:17:68:f3:18:99:52:dd:d9:83:7d:37:42:f6:
c8:6e:f9:4f:da:ec:57:8e:6f:81:64:b2:8b:43:eb:e4:8f:14:
3f:31:1a:b3:bc:d2:23:c7:52:c6:ac:1f:bf:22:c3:95:16:bc:
d0:d8:b7:55:50:6f:ec:c1:5d:8c:29:40:38:06:b2:53:a7:57:
a1:c9:da:57:af:eb:4f:ff:e6:c9:fa:a3:e0:f9:5b:40:c3:42:
da:06:d4:09:4a:ea:f7:1b:2b:07:4e:de:41:73:1c:53:ed:4c:
ae:4f:aa:2b:89:8f:2c:3d:d9:04:ac:7f:6f:1a:52:b5:96:f5:
93:e8:bc:d9:c9:ee:19:8e:52:d3:bd:ca:ab:b5:4a:0c:98:6d:
9b:4d:7f:87:d0:fe:20:fb:8d:6c:0e:62:46:28:2e:a0:f4:fc:
b2:6b:35:f1:82:1e:8e:82:b1:e9:5f:99:13:d3:7a:44:83:39:
91:1d:c2:cf:40:33:a9:6c:d5:1b:32:c3:42:d0:5f:dc:7c:f3:
19:53:93:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:44:02 2025 by rpki-client