
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: ihRsvcyOezTSOF2y+Bw6RCSwQGGaNPlIQAhOCqQD4Dg=
Subject key identifier: 89:F6:68:54:02:5F:F1:2F:22:92:FE:22:B6:8C:2E:40:41:9A:31:FC
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 01989524D35D7B18EBF7F4F25FA6B6ED95B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 0646
Signing time: Sun 10 Aug 2025 18:01:15 +0000
Manifest this update: Sun 10 Aug 2025 18:01:15 +0000
Manifest next update: Mon 11 Aug 2025 18:01:15 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: XmJz2dOKu01WXjJLWFRO8X+oZ3CVg5sg75707qjX1z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:d3:5d:7b:18:eb:f7:f4:f2:5f:a6:b6:ed:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Aug 10 18:01:15 2025 GMT
Not After : Aug 11 18:01:15 2025 GMT
Subject: CN=89f66854025ff12f2292fe22b68c2e40419a31fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:75:d4:a8:fc:64:0f:7b:f7:90:0a:5f:64:
02:39:dc:0c:47:b8:99:a2:30:86:4e:9e:89:5b:3d:
f1:4d:50:02:f4:cc:b9:57:92:19:ff:87:1e:03:c4:
05:21:35:ed:b8:f2:c3:1e:95:3a:e8:7c:b1:e9:d8:
d8:c8:96:08:be:70:ce:a9:16:1d:a9:94:8e:ac:d9:
7f:04:0e:e3:4a:95:2e:e4:58:27:c9:81:69:11:4c:
e0:1f:fa:01:77:ec:8d:cb:73:c0:da:b3:64:e7:6e:
79:83:17:90:c0:ba:e7:ac:98:8e:39:bd:18:c3:03:
0a:1c:3b:99:45:70:27:c7:8b:a7:92:dc:a2:31:8a:
1f:96:c3:0a:8d:93:bf:49:25:33:99:00:c7:6b:cb:
20:96:54:83:83:bd:b9:04:09:14:0a:16:6b:1c:02:
dc:b3:77:3e:2a:b7:eb:ee:a7:b9:5c:60:c9:87:7d:
6d:5a:27:84:e9:05:93:aa:e1:c5:c9:6b:ed:1d:26:
8f:bd:e5:f1:a9:a2:98:ef:cd:47:e9:c3:1b:11:18:
35:0f:ba:fe:6e:07:0f:80:c4:6f:28:c5:8c:b5:3d:
71:88:ab:90:68:75:1b:c0:63:8a:41:6d:e8:0a:49:
e0:05:5a:75:f7:54:94:29:d3:a3:a2:9d:43:9d:6e:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:68:54:02:5F:F1:2F:22:92:FE:22:B6:8C:2E:40:41:9A:31:FC
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:d0:43:41:d5:9d:cb:fd:aa:c3:28:2a:f7:d1:dd:eb:59:
d9:d3:de:bf:8e:d6:79:32:ab:3d:57:2b:31:ef:a0:05:82:62:
ca:7c:6d:40:4f:51:1e:8d:86:92:66:6a:02:14:44:e1:3a:25:
44:17:b3:8d:f3:cb:e7:61:dd:99:5a:2a:21:13:a1:6f:1c:f1:
f5:4c:2e:8e:05:71:d5:29:61:39:ad:6e:4a:7e:4d:2d:6b:bf:
05:e2:ea:ac:4f:67:f7:cb:7b:4f:08:e2:b0:5c:2c:1c:2a:2c:
34:ec:d0:7e:9f:85:4b:1f:27:05:53:83:17:b9:10:0a:c5:ed:
ab:cd:6a:38:ee:ec:fa:17:6a:82:cf:0d:62:6c:91:3f:2b:76:
49:28:39:06:5b:b4:75:61:33:3e:17:60:e3:8e:97:80:1f:e2:
5c:9f:57:e1:e6:b0:c8:d1:f1:b9:03:64:ef:5b:58:bc:29:e3:
77:8a:81:da:40:84:4f:08:91:1d:fa:ac:3f:80:78:c6:37:a1:
12:0c:d0:a8:7b:3e:8d:b5:65:b5:8a:0e:08:05:47:e2:2a:d3:
1e:6a:1b:17:a1:46:f0:cf:88:29:0f:f1:16:e6:0a:a2:a4:4c:
1a:e8:7c:e8:02:7b:46:17:a7:0b:40:41:77:ff:81:ca:05:ee:
eb:2a:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:41 2025 by rpki-client