Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: ei9OHOgkDPnZadXcQc5YbXjOwJ838d4utE6F9uCx9Vs=
Subject key identifier: 7E:0E:02:30:81:40:87:60:15:07:94:E8:66:60:23:48:09:2E:B1:AF
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019882B05D990780EC8E1FA6772311FCA888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 04:00:52 +0000
Manifest this update: Thu 07 Aug 2025 04:00:52 +0000
Manifest next update: Fri 08 Aug 2025 04:00:52 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: F2TJgf5oZpmoRfc3H9xS79hZwOFcpcnkoeZTNT3RsVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:5d:99:07:80:ec:8e:1f:a6:77:23:11:fc:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Aug 7 04:00:52 2025 GMT
Not After : Aug 8 04:00:52 2025 GMT
Subject: CN=7e0e023081408760150794e866602348092eb1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:1a:70:c4:ab:bc:e0:4d:16:ed:27:7f:1c:
d8:23:68:fd:dc:3d:c7:a5:41:10:0d:ba:51:11:cb:
81:cd:73:8e:83:85:22:8c:5e:1c:3f:71:71:bc:1f:
8f:5e:78:9b:19:09:23:f7:5e:0c:db:6a:a6:bf:e1:
45:62:74:23:eb:9b:2a:17:92:5a:cc:72:ee:6f:ce:
74:ff:10:16:61:71:f3:47:11:c3:d6:f3:e0:be:4d:
82:b0:e1:cc:d3:3b:b6:b3:a2:dd:e4:0e:bf:cd:b5:
fc:2b:00:3b:b7:6f:51:b4:c2:8f:d8:ca:89:ff:18:
7f:7b:45:6f:3d:e7:cc:23:a1:9a:89:60:bf:ea:09:
31:31:5d:7f:1d:ad:f9:75:ef:fb:ed:97:92:89:28:
c4:ca:ea:e4:a2:7b:3e:d9:ab:b6:53:51:41:7c:68:
d5:91:f9:89:8c:56:28:d7:69:46:d7:a0:32:65:20:
6e:1c:3c:2e:23:2c:eb:e5:2d:66:e1:0f:bc:49:2a:
d7:3f:51:0b:af:d5:9b:63:51:bc:a1:96:3c:2f:8b:
9b:31:d6:91:75:2d:4e:01:12:a9:c1:5d:52:d2:2b:
ee:28:4d:8b:a3:a5:72:98:cd:74:5f:a1:fc:2d:8d:
d9:c0:73:a1:b0:2e:c5:c5:03:e6:9c:02:f5:f5:17:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:02:30:81:40:87:60:15:07:94:E8:66:60:23:48:09:2E:B1:AF
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:21:f6:8a:78:5a:11:d7:05:16:5f:3a:14:22:1b:46:7a:27:
27:0e:e0:8b:4b:08:36:6b:b9:2c:f3:9b:74:10:fc:1f:df:ca:
a3:12:65:bc:be:91:e4:c0:65:21:34:c7:1c:6f:e6:cf:de:98:
13:9d:bb:fe:c4:a6:1f:32:c8:a3:2c:3d:97:84:f7:ca:86:04:
b1:f7:06:08:1f:0d:4c:28:3c:47:6c:c4:43:f0:fc:11:ba:28:
e7:f4:4f:53:99:72:43:84:1f:34:1a:eb:5b:78:0b:c6:ba:0c:
50:fa:78:0b:a8:11:4d:83:a8:55:17:cc:a4:11:0d:b8:12:5b:
ef:9e:a2:ce:6b:22:dd:12:17:5b:6f:92:f9:e8:bd:46:d5:d9:
c7:68:09:d3:8a:af:bc:a7:66:31:da:20:2b:41:d9:8a:b2:ca:
23:51:b7:f7:a3:0d:de:2a:65:86:29:11:52:b5:e4:ab:26:f8:
33:01:1b:c7:ef:d6:84:a3:78:57:f7:72:45:81:f2:99:60:51:
d6:10:6d:c4:c2:ef:71:80:0c:7f:32:2b:da:f9:c7:ac:60:22:
3b:1c:f4:2f:85:22:85:ac:37:7f:70:2e:2c:2f:26:7e:50:60:
a9:fa:64:93:5f:fb:41:a6:70:bf:d8:c9:f6:9c:3e:65:aa:6f:
7b:b8:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:52 2025 by rpki-client