Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: t3AJYDPRpZcvXiK/3HgXBv4R5dXu494KOkTKI3tnUZE=
Subject key identifier: 47:A3:63:73:F3:1F:77:3C:95:DD:36:72:B8:CC:0E:95:E4:16:96:6E
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 01988EEB8FAD864AE930CF0E9F46EF7438D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 13:00:59 +0000
Manifest this update: Sat 09 Aug 2025 13:00:59 +0000
Manifest next update: Sun 10 Aug 2025 13:00:59 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: vQaadZFGvdEHvJP/4+6+cOdNQaOjhF9Pz63eVWTSbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:8f:ad:86:4a:e9:30:cf:0e:9f:46:ef:74:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Aug 9 13:00:59 2025 GMT
Not After : Aug 10 13:00:59 2025 GMT
Subject: CN=47a36373f31f773c95dd3672b8cc0e95e416966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:1f:de:7c:9c:94:5c:ac:9d:0a:09:cc:20:
cf:b2:7a:4a:32:06:18:5a:05:3f:fc:83:ed:e2:f0:
c8:9f:d1:1b:4a:f6:6d:e3:66:ea:fb:0a:ed:a8:67:
07:4a:ee:fb:cd:cc:66:af:3c:09:55:06:76:2e:4a:
1d:f6:d2:2c:51:99:17:8f:84:a8:40:c5:b6:d1:e9:
1f:ef:07:e8:b8:9a:2c:d7:12:99:60:ff:d1:1f:f1:
01:a5:a5:98:69:c0:c9:04:ee:77:87:3a:96:70:27:
ce:15:7e:63:bc:cf:b0:df:48:7d:c3:2b:0c:db:e8:
7c:6f:47:3d:07:94:60:3b:3c:60:01:12:0f:55:70:
d9:fc:50:5b:d2:bf:8f:5e:ee:b3:1d:7a:46:82:1c:
92:b4:ed:96:42:f0:59:65:95:1f:3b:af:4f:20:7b:
d7:7a:39:02:7d:87:3f:73:75:c7:62:0f:d5:b2:99:
a0:02:54:02:4a:0a:7c:c4:f5:77:44:4d:89:2c:e9:
44:e2:ee:33:78:b6:61:74:4a:98:04:a0:b7:2a:db:
1f:09:ff:84:f1:64:23:7f:f1:c3:bb:02:b2:5b:34:
c8:c6:25:1b:00:53:1d:2f:86:a6:d8:be:80:3e:9e:
24:59:28:0d:c4:d5:70:7e:a8:59:49:3d:62:4a:b3:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:63:73:F3:1F:77:3C:95:DD:36:72:B8:CC:0E:95:E4:16:96:6E
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:12:4e:26:6e:ff:6d:e7:9e:c3:79:c5:41:66:bb:17:5f:
fd:a0:6a:b5:db:71:ba:cb:36:05:df:e2:35:84:b7:96:7f:cb:
5c:4b:80:97:a6:8b:78:5e:9d:27:4f:8b:2e:e2:34:13:fa:b0:
01:80:62:dc:8c:95:f8:22:2c:fa:7b:fe:e1:c3:31:1c:5b:5c:
ba:61:1a:14:ec:61:39:f1:1b:6c:39:3a:ac:b5:68:0f:1f:e5:
61:e3:21:cb:64:43:3e:b0:b4:0a:0a:30:aa:ab:02:a1:ed:f8:
4c:15:e4:bf:5c:fa:1a:79:c4:dc:7c:b8:f4:6c:7c:be:5c:aa:
79:32:ec:96:13:89:4c:31:d6:38:b9:5b:11:6f:6b:96:cf:e1:
5d:f0:11:a3:51:4e:28:eb:fe:02:99:2f:6f:f4:f7:8a:d4:87:
8f:89:b1:dc:cc:f6:20:80:74:6c:06:62:64:75:2a:da:11:b8:
f1:33:87:16:c0:08:49:7d:36:e1:5a:19:96:33:f1:61:cd:3b:
45:b3:c9:c3:2e:ba:0c:c1:ea:c2:66:76:27:50:ec:a1:f2:b6:
f6:b3:60:3a:9c:a4:59:46:d0:72:7c:ad:dc:e9:e9:cc:48:50:
e5:94:44:55:a2:57:cc:98:f6:46:6f:ec:ab:75:2c:11:bb:53:
a9:28:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:22 2025 by rpki-client