Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: HFQEAh7Bbere3kclrL0rib0dchsDvdWBwOvl9WBKkbg=
Subject key identifier: C8:22:0C:A9:48:ED:D1:4E:A5:D6:78:CC:3B:7F:BC:2A:E5:DC:EB:05
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019887A02B385B9FE26B4FD2AF6F6C395A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 03:01:17 +0000
Manifest this update: Fri 08 Aug 2025 03:01:17 +0000
Manifest next update: Sat 09 Aug 2025 03:01:17 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: Az8XgPlLllTe0AxrlkbYIXLk/+A95ieUjSYVJKkslhc=)
2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:2b:38:5b:9f:e2:6b:4f:d2:af:6f:6c:39:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Aug 8 03:01:17 2025 GMT
Not After : Aug 9 03:01:17 2025 GMT
Subject: CN=c8220ca948edd14ea5d678cc3b7fbc2ae5dceb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:6a:fc:6b:32:b2:a4:cc:14:fb:cc:50:16:
2e:d0:cf:29:50:c2:a2:1a:0f:76:8a:4a:4e:1a:2e:
52:7a:59:e6:09:7e:63:ac:0e:47:7b:63:6f:a5:d8:
06:66:06:6f:00:df:fe:3a:27:a0:a2:9b:a0:73:17:
06:12:18:29:9d:8d:07:8d:3a:d8:fa:f1:f1:85:fe:
a1:00:5c:71:0b:cc:92:0d:2c:fe:d2:c2:a8:95:ba:
9b:b2:c8:f9:79:43:64:96:6c:c4:aa:6f:41:18:5a:
50:0e:db:e7:ef:5c:29:9c:a7:7b:0a:33:61:62:46:
6a:6f:c7:21:f2:bd:87:d0:2a:c1:fa:f7:d8:b6:19:
ea:fa:93:93:f9:27:8e:4e:88:f0:d1:7f:62:07:46:
24:7e:c8:f4:48:9d:a5:9d:06:41:82:2f:60:e9:64:
1e:1a:85:52:8c:9d:c5:d4:47:aa:c2:cd:f4:aa:40:
34:62:f8:a0:c6:a5:0d:f5:15:a0:48:5f:25:b3:3f:
85:3f:e0:a4:a6:d1:1d:2b:cd:3d:ba:a7:fc:9f:b8:
a3:31:00:40:1e:b6:89:7a:cd:be:9c:48:ad:67:12:
98:5b:dd:16:15:98:6a:af:4a:2f:be:46:c3:a1:f8:
dd:a4:0b:cb:56:04:24:63:d1:37:c4:b5:60:5d:0f:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:0C:A9:48:ED:D1:4E:A5:D6:78:CC:3B:7F:BC:2A:E5:DC:EB:05
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:45:aa:1c:cb:72:ee:08:14:fd:69:1a:da:bf:35:c6:9d:cd:
b7:cc:21:e8:f6:1e:a5:ce:cb:cf:e6:86:b9:f6:74:a6:56:63:
46:57:bf:d8:0a:dd:7e:ec:85:78:19:22:ef:3a:06:29:ef:9e:
a7:6c:35:f5:8a:d6:5f:e3:71:25:b5:cf:1a:7a:a8:81:70:95:
0f:cb:93:d5:06:c3:67:f7:ff:55:b0:f0:37:a8:90:92:84:b0:
6a:bb:86:fa:1f:dc:e1:f1:aa:90:1f:cd:7d:75:24:71:a1:b8:
af:4d:9d:7a:14:01:6b:a2:51:ff:ce:df:a6:9d:d6:ea:2e:a5:
8b:0a:c5:79:df:16:f0:fd:54:6c:43:de:20:46:7b:a7:81:04:
a3:ef:03:cd:1d:81:bc:5f:0e:98:8d:67:1e:e0:24:1e:b3:cc:
44:f8:65:81:4a:40:9f:02:69:4f:ed:5b:77:76:bc:e4:d1:9e:
5a:6d:9f:ad:43:3f:24:e1:6c:eb:1c:de:d1:d9:5f:05:3b:37:
43:79:bc:53:7c:10:ac:34:9c:22:ab:7c:ce:f1:23:7e:f5:95:
a2:56:b1:c4:5c:7c:23:87:c5:64:83:54:28:3d:98:be:a0:5e:
31:12:d5:ef:77:58:b7:69:29:4a:b0:72:af:00:8e:3f:6e:94:
9b:37:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:03 2025 by rpki-client