Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: FzNGdk5WP/Jj94zVAQEwLC1oBRjKBxbMy2aThKcOjyI=
Subject key identifier: 3E:FE:39:9C:ED:58:45:78:6B:BD:7E:5E:6A:D7:BB:E7:DD:A2:C4:C1
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 01987E662499CD872AB6DB8E85AEE7AE409A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:01:19 +0000
Manifest this update: Wed 06 Aug 2025 08:01:19 +0000
Manifest next update: Thu 07 Aug 2025 08:01:19 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: BWpKyi/Z7uyiTd3vk1dFa4sndxHSmPibzPiVLF8myxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:24:99:cd:87:2a:b6:db:8e:85:ae:e7:ae:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Aug 6 08:01:19 2025 GMT
Not After : Aug 7 08:01:19 2025 GMT
Subject: CN=3efe399ced5845786bbd7e5e6ad7bbe7dda2c4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:4e:e1:97:9a:24:72:34:85:ef:3b:86:c4:
95:2e:fc:f6:13:27:5d:d4:81:26:3a:96:bd:35:60:
a0:29:98:29:bf:7b:c4:a0:b2:48:47:99:d6:ed:8c:
90:93:9e:1b:53:c9:f8:d0:b9:d2:c2:fb:1e:c8:0d:
4a:0f:92:91:fd:71:15:f9:fd:38:27:19:16:ef:6e:
7c:88:f7:3f:64:89:9d:9d:f6:22:15:87:b5:e1:b6:
7a:bb:43:04:cf:43:e7:7e:b8:e4:b4:f8:06:82:f7:
c2:b9:80:1c:4a:e1:70:a2:bc:d4:cd:61:63:21:6a:
39:9f:5b:ea:88:0c:d8:45:ce:55:dd:17:01:4e:97:
da:fd:e9:cc:fa:08:37:da:7d:b0:c0:c6:e1:7a:be:
bb:a7:45:19:9a:56:d1:69:9d:83:73:37:26:ee:9c:
53:da:75:c9:c0:1e:cf:39:27:80:64:f7:4c:c8:7f:
47:56:72:59:33:58:6b:fa:95:5e:f5:21:9e:f0:0a:
64:20:1d:e2:c8:ec:25:be:b1:64:1b:05:eb:8d:9c:
e9:5a:7e:57:70:55:75:fb:5e:2a:44:a0:1c:62:78:
c7:f3:19:a1:fe:64:75:5f:c2:2b:02:93:b4:c3:66:
b4:08:0f:44:7d:0c:95:26:5e:9b:17:9c:5f:3b:14:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:39:9C:ED:58:45:78:6B:BD:7E:5E:6A:D7:BB:E7:DD:A2:C4:C1
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:40:12:6a:c9:29:2c:21:a8:ba:26:95:75:16:a0:5f:eb:77:
13:e2:f2:29:cd:0d:85:48:3f:8a:3f:bb:56:8a:e3:bf:e1:a5:
1f:c7:65:4c:07:ef:9f:a3:46:53:58:a5:e9:3c:0c:da:63:11:
18:e8:83:f6:1f:95:1d:6a:a5:60:46:03:35:2b:8f:85:b8:a0:
ab:13:b3:8e:ea:8a:b9:5b:7b:46:b2:f5:f3:e9:f9:97:04:4f:
c5:04:a7:19:57:70:f1:08:97:9b:c3:99:58:f5:19:72:91:30:
1c:ae:3b:0c:8b:2a:a7:67:74:f3:89:82:2f:d9:f9:34:a6:e2:
6b:21:8f:0b:98:e8:d9:aa:46:f7:dd:37:c3:7e:33:ed:e1:9a:
b5:cc:0f:fe:4a:a7:03:0c:40:14:09:10:39:e8:ee:ff:a7:3b:
62:6b:01:7f:f9:c3:7d:de:ce:41:a7:90:61:20:b7:c9:66:f7:
8e:42:3d:97:f5:74:90:4f:90:d8:58:93:67:a9:f4:8a:8a:c1:
4a:6e:09:a8:77:02:77:6f:7b:de:b1:b4:29:ba:58:aa:cb:0e:
82:6d:ad:44:d8:fd:af:d9:d1:2e:db:6f:e7:fd:75:fa:d4:a9:
29:e3:bb:a2:33:b8:8f:99:61:95:24:f6:c9:7e:6c:85:22:60:
7b:c2:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:47 2025 by rpki-client