Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: 0fdidgo+uuCx9yuTSXaKzxrgcCi4v5WOW+hJPyyBR4w=
Subject key identifier: A3:D2:CD:40:EF:CE:66:5A:C2:0C:3C:46:9F:91:D3:10:B7:66:D2:61
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 01987486969B167818E1E9C2AFA34993711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 10:00:34 +0000
Manifest this update: Mon 04 Aug 2025 10:00:34 +0000
Manifest next update: Tue 05 Aug 2025 10:00:34 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: uRtbRHeQGPj23I7eaz78uSMcDIYfgCyw+CbuqQXXQs4=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:96:9b:16:78:18:e1:e9:c2:af:a3:49:93:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Aug 4 10:00:34 2025 GMT
Not After : Aug 5 10:00:34 2025 GMT
Subject: CN=a3d2cd40efce665ac20c3c469f91d310b766d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:1f:89:19:9c:24:83:80:a4:be:53:f5:47:
72:b0:5c:42:b0:8d:bf:2a:cf:8a:5f:05:ff:70:53:
65:a6:21:ca:7d:0e:5d:ff:75:3d:90:a6:66:f4:82:
14:b3:45:c0:86:60:87:c0:df:0c:47:2e:05:e5:a8:
92:7d:4d:f4:8e:d4:27:5c:d3:02:04:d2:2d:17:f0:
18:db:78:90:d0:f1:d8:be:38:a7:1c:c0:28:3b:45:
f0:5e:42:d0:eb:37:d4:9c:b5:08:de:5f:5f:1e:35:
82:23:81:2c:64:f7:c7:ad:07:c8:c3:c3:00:f9:80:
c1:19:d7:9f:51:bd:6c:a2:fd:73:69:20:de:e5:22:
b5:60:d5:96:d3:46:66:bb:28:90:c6:92:78:7a:45:
1b:71:44:2f:06:e9:76:42:63:e5:7e:7d:42:d5:86:
2f:70:a0:e2:77:fd:64:e1:78:d1:0e:e9:bd:3b:95:
41:2d:e2:a3:d9:fd:31:2b:fd:3f:10:53:0d:a6:72:
e2:0f:f4:3b:43:28:0a:e3:ad:4e:b3:ef:b4:7a:28:
ea:85:97:7e:51:af:e6:93:12:ab:52:49:90:c9:a1:
cf:80:c8:c1:11:4a:75:b3:e9:ed:56:06:bd:bb:7d:
8b:52:65:b6:dc:65:05:55:ac:0e:b8:d1:ef:05:57:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:CD:40:EF:CE:66:5A:C2:0C:3C:46:9F:91:D3:10:B7:66:D2:61
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b7:cc:38:80:31:00:76:2a:17:ae:b6:5f:70:91:f5:84:93:
f8:c0:8d:de:12:ce:d6:4e:30:3b:2a:f3:b6:7c:12:94:c7:67:
a6:da:80:7d:89:ca:e7:d7:b3:41:2f:ad:40:7b:dd:c1:c8:b1:
c3:1b:ba:fc:1b:f6:f8:74:9f:86:f0:d3:68:eb:18:44:11:75:
62:52:c5:a7:f0:36:b4:a6:ac:8b:fd:72:f4:b5:26:cd:39:e0:
92:3c:80:51:c4:06:ec:55:69:ae:39:42:61:be:0e:f6:62:d9:
f5:5d:0e:02:c2:ef:fb:88:60:43:d5:36:e8:be:00:8d:a9:17:
5d:2d:cd:19:c5:b3:0e:af:fb:2f:e6:53:86:c5:66:13:6c:85:
f5:f6:1d:6a:7a:ba:ae:3e:e8:4f:c3:ab:05:3d:a0:de:14:a8:
59:0a:18:e8:ac:38:fe:3d:d9:b1:e5:a8:4c:fb:80:6e:39:8d:
65:d7:e6:14:8f:1b:ee:e5:e5:d1:90:b6:1b:f5:54:20:86:43:
e1:e7:45:af:5d:6c:b3:dd:df:22:ec:d5:ba:7b:84:18:3e:60:
ea:19:92:ed:55:fd:99:9b:ac:70:5f:73:cc:c7:6a:81:ef:5e:
eb:14:e4:3e:2a:d1:28:3f:87:77:0a:05:ad:b8:ac:5b:56:d7:
e1:c8:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:22 2025 by rpki-client