Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: 6/iON7irqcvTROxCgiQvp241yxz7voDQMopeyT3AjpQ=
Subject key identifier: D2:87:39:23:5F:52:E4:16:98:8E:8E:5E:F0:27:3C:5D:E1:EB:58:81
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019873E2F7ED59717478C12315928391BA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:51 +0000
Manifest this update: Mon 04 Aug 2025 07:01:51 +0000
Manifest next update: Tue 05 Aug 2025 07:01:51 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: wX0Jt+p88MjvxPAOaGyOMvFUFN96dI24kQ0cMXrxz9I=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f7:ed:59:71:74:78:c1:23:15:92:83:91:ba:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Aug 4 07:01:51 2025 GMT
Not After : Aug 5 07:01:51 2025 GMT
Subject: CN=d28739235f52e416988e8e5ef0273c5de1eb5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:31:53:f6:fb:15:c5:d0:37:f2:25:7f:c5:
d5:e2:53:ec:fb:52:35:f6:88:35:a0:23:dd:e6:5d:
3d:3f:f1:0a:e5:fd:cd:f4:47:d5:d6:a3:f3:f7:57:
42:4f:2f:0b:22:8f:7b:10:52:fa:04:7a:80:8e:55:
1c:e0:df:c2:fd:e4:a8:0f:5e:fb:fc:fd:38:18:50:
15:75:86:25:a8:f7:50:02:fd:09:d2:17:61:4a:63:
1d:29:0e:fb:e1:f4:5e:97:d1:00:df:3c:af:69:a8:
0d:27:c9:8d:8a:20:17:57:01:1c:46:65:2e:cc:ef:
8b:cc:d5:e6:ea:d1:60:8d:e0:5a:02:71:de:31:fa:
4a:f1:84:0f:92:c6:42:04:19:b8:14:5d:66:07:58:
5c:81:e2:71:c1:2f:a8:a0:19:a5:cd:bd:18:c7:5a:
59:32:00:3e:9d:7e:30:fb:14:12:e5:ed:a1:3c:d9:
85:0c:1f:e9:f7:0d:e4:96:1e:a4:15:57:d7:5c:9d:
4f:86:55:31:cd:11:d4:05:42:aa:aa:33:16:a4:71:
d9:a8:b2:d1:6c:24:85:8a:67:ed:e8:36:2f:89:7a:
85:b3:6e:86:6c:c1:34:47:d3:e4:fe:92:9a:d1:0d:
11:a2:7c:42:cc:71:10:ce:39:0f:23:1a:50:18:7a:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:39:23:5F:52:E4:16:98:8E:8E:5E:F0:27:3C:5D:E1:EB:58:81
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3c:47:ea:62:25:17:86:85:77:db:13:44:01:31:40:30:7c:
b9:0b:da:4c:21:ad:ab:fc:89:bb:b2:12:1c:74:54:b4:89:ed:
28:83:8f:9a:8e:c2:ff:e0:2c:e9:9f:94:6b:32:7d:4a:11:42:
31:ec:cf:7d:b7:a4:58:6f:44:2f:eb:34:9e:78:8b:a4:cc:8d:
12:43:38:72:95:29:12:08:ee:d8:5f:e8:23:56:b0:ee:78:88:
e7:bc:bf:d6:90:65:07:a6:1f:ef:9e:9c:13:fc:0c:43:8c:19:
89:79:28:b8:25:92:6a:69:56:6c:92:8e:cf:7d:a8:d5:91:b7:
68:b2:d3:e0:64:f6:f4:60:89:3f:ab:f5:6c:62:3d:cb:4a:d6:
9d:ba:37:94:f5:a2:a0:8b:58:57:00:be:12:bd:8b:58:d5:36:
37:92:80:5e:88:41:82:88:e6:9f:b4:2d:68:72:32:8f:bd:67:
e7:40:b1:88:7c:cb:f6:d9:bb:50:b0:b6:cd:ed:54:36:d4:e1:
b3:ee:84:ab:ca:c5:7e:ba:ef:d6:ca:99:4e:be:79:d1:54:6b:
c5:44:d4:f2:8c:14:91:79:d6:f0:92:71:3d:86:1b:77:7e:3b:
24:43:94:4a:13:06:e1:56:d8:86:89:18:38:28:28:0c:e4:ca:
36:75:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:16 2025 by rpki-client