Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: OmYO3bc5gMwkMhYkix9R7F7cOHzXMjz23UJSntUYXMQ=
Subject key identifier: 49:13:8D:F4:3B:2E:F5:8A:A6:9B:0C:51:BC:46:B8:6C:46:22:CF:4D
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 01988C21147CBEBED41F753385235260383A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 00:00:34 +0000
Manifest this update: Sat 09 Aug 2025 00:00:34 +0000
Manifest next update: Sun 10 Aug 2025 00:00:34 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: zrdCvGjNPEQEurz+co88mvAUP/Y/fG5uyD6SV45DEnA=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:14:7c:be:be:d4:1f:75:33:85:23:52:60:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Aug 9 00:00:34 2025 GMT
Not After : Aug 10 00:00:34 2025 GMT
Subject: CN=49138df43b2ef58aa69b0c51bc46b86c4622cf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:46:aa:1b:27:cd:0f:48:b6:05:71:e7:a0:
10:ac:59:16:7a:04:ad:27:f3:95:f6:38:0e:96:f7:
38:92:e3:db:37:22:87:d0:9b:6b:e7:b0:e9:74:6d:
0f:75:4f:53:06:9e:64:31:41:c7:ec:21:da:80:d3:
e2:c9:2b:20:6a:90:23:d9:46:70:1d:2d:d8:1f:72:
07:2b:a0:ad:9e:bf:ce:0a:42:36:6a:d0:11:38:62:
81:de:d7:1b:f9:87:2c:03:a6:53:a1:ad:f1:29:63:
be:38:1d:f3:b5:a7:8b:ff:3a:8d:7b:ec:cc:ff:a7:
7a:27:04:47:39:f3:6a:6b:34:32:b0:b1:fc:2f:54:
73:72:2b:d2:79:49:35:60:97:13:9e:aa:a5:fb:81:
b2:88:71:c6:e0:83:9c:ff:02:a3:b6:ac:af:8f:07:
26:6f:46:64:71:cd:a5:48:5a:15:63:0c:a8:dd:fb:
0b:52:39:aa:31:f2:09:1e:00:cd:8a:45:9a:11:5e:
d5:ce:f8:e5:35:ea:00:c1:5a:9a:d3:cb:20:42:d4:
c6:da:1c:eb:77:51:52:f5:ca:e9:37:40:b5:24:7d:
4c:88:4b:cc:76:31:34:3b:ff:72:b2:ed:a1:75:be:
d7:0b:25:52:b6:3f:8b:ca:18:a4:93:4e:fe:e8:ee:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:8D:F4:3B:2E:F5:8A:A6:9B:0C:51:BC:46:B8:6C:46:22:CF:4D
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:75:30:33:38:68:5b:6f:c3:9b:ea:9a:df:b3:8c:f7:66:fc:
eb:64:79:a1:f5:ab:e3:49:a9:0e:ed:11:a3:31:48:7b:32:9d:
20:50:e2:be:87:1c:af:c6:96:7c:4a:b5:05:f6:17:1e:69:b2:
be:e9:1a:9f:79:34:2a:1d:f1:69:8f:09:2e:74:92:5c:13:a8:
78:68:80:bc:5e:5a:40:cc:46:e5:49:16:7d:97:11:5a:1c:df:
cf:b9:a7:77:c0:c4:ee:ed:bd:6c:e0:f5:7e:c4:8e:fb:b4:6a:
de:b2:d6:59:fb:b1:48:56:bd:32:b8:fa:55:90:c4:8d:4f:9f:
76:49:3a:d2:f4:12:88:81:a0:a2:ee:51:da:91:5f:d1:40:88:
f0:db:cd:61:d4:38:97:f5:5f:f4:ec:e6:4d:62:25:74:45:21:
44:b6:ae:a7:43:cb:35:7d:a9:07:6a:8f:fd:ee:6d:57:ca:66:
0d:ac:ba:20:db:b5:53:2e:c3:2b:7c:7a:85:c5:a4:24:39:07:
5e:5a:03:95:62:4d:77:47:38:84:f8:c6:07:2b:f6:b4:e7:dc:
a2:7e:98:60:60:c7:43:77:a1:44:06:bd:27:66:42:4f:19:a0:
06:ba:45:38:df:0a:7a:ff:45:b2:e6:ab:f7:66:30:ab:02:4d:
79:c4:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:34 2025 by rpki-client