Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: 6o2M/ZD3CR3NtU3kJWXAzxwff5KeYzHYQzJ2SqPZSLA=
Subject key identifier: AD:35:31:4D:B4:E7:05:42:47:08:63:D0:25:21:E2:DC:9C:33:D9:47
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01987AF74614D4AF0DEF5E5810E83E4BBFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0DF3
Signing time: Tue 05 Aug 2025 16:01:22 +0000
Manifest this update: Tue 05 Aug 2025 16:01:22 +0000
Manifest next update: Wed 06 Aug 2025 16:01:22 +0000
Files and hashes: 1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: XLkIghGvBBfEMladzcHVbkH6xFsUEjmYJapTOlSVKyM=)
7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:46:14:d4:af:0d:ef:5e:58:10:e8:3e:4b:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Aug 5 16:01:22 2025 GMT
Not After : Aug 6 16:01:22 2025 GMT
Subject: CN=ad35314db4e70542470863d02521e2dc9c33d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:83:d2:31:e7:a3:9f:be:02:e6:63:db:ef:
08:d4:75:df:0c:1e:ab:62:3d:73:34:a2:c1:05:88:
31:4e:07:30:5c:99:62:75:b3:1c:b5:41:ed:9a:82:
4a:a5:ab:9f:63:42:cd:3c:f2:b6:23:47:eb:c4:31:
a3:18:33:f0:04:ef:71:43:cf:e2:da:8f:39:89:b7:
be:49:46:03:06:d2:ab:7f:cb:1c:89:9b:9c:08:14:
60:04:18:78:e0:19:ef:c2:b4:5f:4d:fb:19:40:26:
3d:d7:71:a4:c5:df:78:f0:6f:b0:e7:f8:ef:b0:1f:
97:f8:24:d9:6c:90:d9:aa:7c:47:99:9d:49:e6:86:
54:ab:30:75:ba:8d:cd:9f:64:46:e3:87:1f:9a:ec:
25:93:94:6f:22:55:9c:d4:67:c8:1e:72:65:71:a5:
5c:5a:ae:17:3b:75:d3:60:b3:ea:ed:06:06:67:b3:
11:c7:bf:bd:14:e5:04:03:a4:c5:f1:81:08:e2:b0:
e4:e8:58:a0:ed:c8:3b:3d:dd:e6:61:bd:93:cb:c4:
2f:eb:7a:fa:9d:8b:70:26:b5:f4:a9:cd:c8:04:86:
42:4d:c7:67:1e:84:cf:16:40:a8:5b:ba:ad:ae:06:
56:c7:56:f8:58:1b:6f:87:72:e6:a2:62:c7:ef:b0:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:31:4D:B4:E7:05:42:47:08:63:D0:25:21:E2:DC:9C:33:D9:47
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:70:b0:80:b9:c7:97:d3:0d:df:7f:6a:39:8b:62:95:5c:
a9:ba:2d:81:64:5f:c7:b0:d5:1a:88:4d:ed:ad:83:f4:ce:8c:
68:da:21:25:ae:14:9a:a4:a2:dc:d9:14:bd:a8:64:27:17:29:
8e:1c:09:7e:be:7e:f4:87:9b:15:80:6b:45:83:d3:37:e8:73:
a0:0c:56:5d:9c:e3:70:f1:97:71:a5:64:59:2c:da:06:34:13:
90:e1:56:7b:da:3c:72:67:b4:b8:ee:b5:61:3e:c2:13:a5:8a:
08:94:09:8e:ce:63:a2:5c:4d:32:e6:26:0b:bb:d4:4f:54:8c:
a4:43:6b:33:4b:b1:84:51:ad:1c:46:39:91:ed:e7:02:9e:36:
27:d0:04:eb:2f:4d:f6:17:b7:58:da:c1:ee:dd:ab:95:7e:72:
51:de:fb:66:f9:9c:4c:29:0f:0b:1d:c2:c5:e6:13:fd:43:b5:
45:89:0d:33:ce:e8:d9:76:49:dc:fa:80:a3:f9:ce:21:09:e5:
bf:63:4b:2f:6b:3a:35:e2:5b:e2:b3:1b:84:3f:40:83:bd:d8:
93:ee:f1:14:a8:40:1a:db:c7:dc:d2:9a:05:36:75:c4:4f:75:
c4:c4:f7:88:27:02:98:38:c6:f8:5f:ef:09:35:2b:34:ec:ec:
7c:7b:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:04 2025 by rpki-client