Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: b+5yg5qGbp7k8TIBsfhgKI/WqyaezETdkzEGAMiK4Iw=
Subject key identifier: 07:7D:1A:49:D4:09:4F:42:47:5B:BA:06:FA:E9:E2:FC:85:51:6D:91
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01987373F6DF3034584F36D6AF7361242232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:36 +0000
Manifest this update: Mon 04 Aug 2025 05:00:36 +0000
Manifest next update: Tue 05 Aug 2025 05:00:36 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: YfDEtdoQz/cp5a5pag4YqrcNvd7Fhhute+c8kcbOSn4=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f6:df:30:34:58:4f:36:d6:af:73:61:24:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Aug 4 05:00:36 2025 GMT
Not After : Aug 5 05:00:36 2025 GMT
Subject: CN=077d1a49d4094f42475bba06fae9e2fc85516d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e1:0b:56:c5:d4:b3:82:5b:22:f7:92:2f:
fb:70:50:85:7f:f0:a9:e3:3d:c0:e8:89:0a:e3:57:
6e:6f:a6:2b:cf:f2:36:29:c7:0b:8e:b2:04:57:45:
67:d0:3b:9f:5b:e9:08:09:fa:91:43:79:3b:8e:bd:
0c:8b:86:87:a0:9b:4e:6f:21:f8:b2:1f:33:34:ae:
1c:63:1e:89:21:c4:38:30:a8:33:92:3d:81:a9:25:
59:8f:35:f0:2d:54:12:f9:47:63:87:4e:a9:61:e0:
d4:32:bc:f8:c5:d2:e8:f9:bb:b9:78:fc:bb:31:98:
b3:2a:95:d3:d3:1b:3c:57:19:9f:92:31:ce:69:ad:
f6:77:b6:b9:9c:93:39:6f:55:18:df:d3:94:dc:57:
04:98:c3:b3:c7:31:dd:c5:ca:e3:ec:b6:64:8c:61:
94:37:19:bb:cb:c7:85:8c:89:1e:d5:b4:86:80:2d:
75:b0:52:4a:15:36:9c:0f:f9:d7:35:d3:fd:43:97:
fb:8d:20:ae:cd:a7:ce:f2:d1:db:87:2b:84:d7:74:
23:0b:c1:bf:f5:0e:67:39:36:5d:fe:48:b3:53:31:
77:03:1d:0b:93:67:61:66:28:f4:2d:a9:ca:76:7a:
0a:21:3d:12:72:06:6b:25:0a:91:41:9f:05:71:01:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:1A:49:D4:09:4F:42:47:5B:BA:06:FA:E9:E2:FC:85:51:6D:91
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c0:5e:9c:fc:9b:95:9a:e5:40:f8:2b:c1:8f:49:8d:1a:51:
1e:5b:91:89:ef:b7:78:fb:aa:e9:d6:6b:52:c4:16:b1:bc:ea:
0b:6f:f6:c7:ae:a9:45:e3:fe:e0:63:05:b1:35:08:f2:a5:24:
2a:9d:19:81:99:86:2d:4d:da:3b:ff:6a:45:9b:da:19:db:8d:
cb:58:d8:28:30:e7:11:81:33:ed:a7:5a:c6:4d:ae:0b:5d:82:
48:dc:b0:87:28:ff:5a:96:ea:fb:cf:82:70:6a:b9:c5:1f:48:
22:d2:30:e2:66:aa:69:7a:92:fa:29:33:00:24:b5:2c:52:83:
01:d0:c1:74:7a:39:b9:a1:d1:e7:b6:8b:7a:74:5b:cf:f7:f5:
3c:2e:72:01:de:fb:cd:13:cf:06:1b:34:37:0a:d3:fd:0b:24:
6f:9d:66:5c:f1:d8:41:64:0f:e7:b1:a5:57:0e:f8:a9:9f:06:
af:bc:f7:e1:5c:75:59:6c:bb:4e:8a:9e:8e:6b:40:90:d6:1f:
64:b0:b9:ce:86:34:e7:37:bc:74:7a:54:f4:aa:0d:4f:f1:f8:
13:5d:0c:41:54:2a:93:d2:c0:8d:25:6f:ad:35:50:e0:c8:7c:
ae:b0:cc:94:f8:2f:e6:cb:f3:21:dc:37:99:25:c6:d7:b7:1d:
32:f1:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:37 2025 by rpki-client