Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier: 8RAFn9d2zVoxWmz3kCbpBb4dkAGhoMAnAj82aQTNfcA=
Subject key identifier: 25:EF:5B:4E:43:41:EA:35:66:1A:EC:33:8C:BC:7B:29:90:A8:AE:F5
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial: 01987BD2D11C57B009560C06A9CA4CBAA3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number: 1266
Signing time: Tue 05 Aug 2025 20:01:10 +0000
Manifest this update: Tue 05 Aug 2025 20:01:10 +0000
Manifest next update: Wed 06 Aug 2025 20:01:10 +0000
Files and hashes: 1: KhThgn0FLgtxgLmV5WuQd88UjJs.roa (hash: UVyvP36EKpZylxYZtY94LC7cB1Xoy48Pim7visCwDUs=)
2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: F7HVDEhqZ+QoWfcS5j95SDD/9X5+wWxJluOMnk23hn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:d1:1c:57:b0:09:56:0c:06:a9:ca:4c:ba:a3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
Validity
Not Before: Aug 5 20:01:10 2025 GMT
Not After : Aug 6 20:01:10 2025 GMT
Subject: CN=25ef5b4e4341ea35661aec338cbc7b2990a8aef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:9c:67:81:8e:4f:a0:57:fb:48:b6:e2:25:
8d:05:bb:46:63:97:c5:c5:f4:a2:41:d6:f2:60:43:
14:93:4b:e4:9e:73:9d:fd:07:9d:f2:9d:46:d6:e8:
e8:9a:2a:c8:ef:ca:3a:ff:3f:9c:83:81:2d:03:08:
fd:0d:9e:73:f6:ef:a1:82:6a:b0:72:2a:0f:09:81:
91:7e:1b:18:73:c0:8a:e3:0a:9f:2f:46:84:fb:38:
2b:c3:0d:1f:4a:fc:3a:85:72:97:d4:f8:5d:1a:58:
d8:cc:6a:31:95:a4:2f:f7:d5:3a:ec:63:7a:b9:39:
01:a1:f4:f9:c8:d8:d3:b8:8c:af:a0:7e:f8:87:a4:
3d:67:8f:a5:d2:40:5e:be:d1:96:9a:fc:92:ce:06:
2a:f3:a1:e9:a4:cf:1d:5d:9a:b9:d5:13:e7:b6:18:
9b:1c:f2:0c:5c:70:46:8d:22:1b:e3:0f:2e:4b:4d:
a5:fb:1e:81:e4:a8:a2:9d:f0:66:32:a0:c2:0a:bf:
69:2d:ac:5c:d4:d8:d5:fc:86:61:7d:1c:6c:18:b3:
e5:6d:b6:82:49:0c:55:55:17:b4:0d:d3:d1:49:08:
48:bb:04:6d:fc:d1:bc:79:35:8b:f5:88:87:57:94:
30:7a:8f:f4:42:95:4f:c9:64:71:66:07:18:1b:81:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:5B:4E:43:41:EA:35:66:1A:EC:33:8C:BC:7B:29:90:A8:AE:F5
X509v3 Authority Key Identifier:
keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:9b:ad:c0:f2:6e:57:5d:80:85:e1:4c:27:0f:89:a1:a5:
5f:c8:2e:37:56:7b:e3:1e:f7:87:1f:4e:95:86:49:50:bd:e6:
5c:81:5d:dc:6d:da:91:6f:32:42:cc:26:5b:5d:a2:b3:92:04:
a6:69:e2:35:3e:9b:96:be:6f:9c:8c:3f:66:19:29:b6:f0:f9:
1d:1f:12:91:ec:c8:f8:df:26:ba:17:75:99:6e:ca:13:f6:eb:
6c:29:7c:02:e8:00:bf:2f:4a:11:ac:e2:c5:66:bf:4a:5f:0f:
56:a3:91:6a:98:04:61:50:e9:2d:d7:b6:3d:2f:ce:2d:7f:31:
5e:38:66:d5:cf:3a:00:82:7a:1c:34:6f:c5:e6:76:21:b1:15:
da:42:5f:bc:d3:54:8f:a9:f8:0a:99:0d:88:59:e5:ce:65:b9:
6a:c5:e0:3b:87:39:62:ea:37:c1:2a:d4:bb:df:05:7e:17:b5:
58:84:7a:0a:bf:67:1f:cd:cc:ec:0e:50:5c:9c:82:59:41:6a:
7c:3e:71:ca:5a:0a:5a:b7:f9:69:17:95:0a:70:da:85:86:75:
35:9c:5f:a6:ba:74:ff:3d:05:e0:ab:53:e5:8d:34:7e:6b:5f:
f0:91:a0:23:bf:e5:b7:89:b5:38:57:64:8a:c9:0f:ed:54:d8:
21:9d:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:42 2025 by rpki-client