Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
File: dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft (raw, json)
Hash identifier: ezHybmDZQbem9xJbY/mxFPNo7ljMp8GH1eMBhMuWxQY=
Subject key identifier: 47:AA:9C:66:0D:18:E9:C0:D1:E7:84:F6:F8:FB:34:57:CA:61:3F:B7
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 01988FFE8A237FDCCB3A293CCC05908857FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
Manifest number: 1370
Signing time: Sat 09 Aug 2025 18:01:19 +0000
Manifest this update: Sat 09 Aug 2025 18:01:19 +0000
Manifest next update: Sun 10 Aug 2025 18:01:19 +0000
Files and hashes: 1: P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa (hash: 3hJsA3Q3EQecJR3hJHgLTYYEIcnWflx0DcKeSfNvhRM=)
2: dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl (hash: 64wpmmh4gm7odqy/EsplRea3K8TpxSTpZ6GduhOmOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:8a:23:7f:dc:cb:3a:29:3c:cc:05:90:88:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Aug 9 18:01:19 2025 GMT
Not After : Aug 10 18:01:19 2025 GMT
Subject: CN=47aa9c660d18e9c0d1e784f6f8fb3457ca613fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:67:62:92:d9:4d:b5:83:ce:cb:5e:a1:e1:
0c:85:4f:d1:70:8e:10:15:c2:bd:5d:5d:61:20:4b:
bd:3a:1e:3c:34:af:dc:5e:90:80:9f:ec:e9:ff:7e:
87:52:df:f6:02:be:00:a3:6e:5b:73:b1:13:26:63:
ff:6e:7c:ed:7c:97:af:35:f4:ab:0b:59:ee:51:91:
ff:89:07:8a:cd:bf:f8:43:e6:fd:96:b2:60:52:6e:
8e:7d:68:60:78:c4:6b:4e:64:24:d4:22:ca:64:60:
1c:11:02:3d:ce:69:5e:59:d9:c9:4c:f6:ef:aa:99:
9a:e4:01:37:5d:ff:22:b8:42:61:2b:00:d4:2d:f8:
6d:cb:d8:e4:69:d4:e7:b6:f1:a8:b8:14:da:f9:d7:
fe:b4:92:47:02:0e:e7:49:c2:31:ca:89:4f:2f:1e:
52:21:39:fa:9d:ea:12:63:3f:84:7c:a7:fc:56:3e:
41:c7:b1:ca:6e:13:33:1a:d4:74:0c:7b:3a:ce:30:
43:50:56:81:31:f0:b7:0c:ca:70:14:72:6c:a0:f0:
24:86:71:35:ee:6d:0a:b3:41:c8:50:18:d6:e0:62:
74:72:5e:bd:1d:50:44:23:49:36:5a:8d:33:ad:e5:
23:5d:91:a9:9d:fb:3b:d3:5f:fe:87:72:3b:dd:2e:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:9C:66:0D:18:E9:C0:D1:E7:84:F6:F8:FB:34:57:CA:61:3F:B7
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:8d:e0:20:97:e3:66:aa:09:d9:77:1e:a5:c2:28:ad:da:
d0:0d:de:be:3a:5d:82:b5:40:59:85:ed:2c:7a:3e:7c:9d:b6:
c7:5d:71:d6:b1:00:b6:c4:89:12:f3:0a:8e:7d:72:5f:b0:08:
1f:d0:4d:bc:27:66:8e:16:f5:a6:a2:23:85:a6:b2:6b:c7:b2:
a9:3d:e4:58:4f:18:92:b9:7e:d4:5a:2e:19:b4:39:3f:e0:81:
63:de:64:69:9b:d9:93:5a:83:e7:30:b0:cb:81:7f:53:46:bc:
67:ac:6f:76:43:12:9f:a0:7e:ec:14:05:8f:2f:7f:98:89:f7:
12:1e:d9:4d:15:90:27:32:88:2f:d4:42:da:e5:2b:42:00:ce:
73:f0:54:07:2f:8d:be:77:f4:41:13:3b:86:bb:f5:ed:fa:0d:
21:7e:f6:8d:6f:c4:70:af:9e:4c:34:02:c6:c6:01:f2:c2:59:
63:0b:48:3a:cf:9f:e8:1c:b3:54:2a:61:22:c9:62:44:e4:80:
03:c8:75:23:31:73:26:6b:31:6e:44:b6:f1:62:06:9c:db:f2:
9c:8d:81:27:dd:ff:ce:82:ea:23:db:45:86:5f:ef:c1:6c:ce:
0b:55:b8:61:e4:23:60:8c:66:c7:93:a1:22:2a:6b:cd:ec:6d:
ee:24:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:06 2025 by rpki-client