Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: /ZED5EKYEY4Og4wJv/KkhEyv+fv1Z9YB6uRA/6wdcVw=
Subject key identifier: D9:90:A4:FB:54:7F:7E:5E:BA:36:D5:EE:07:8B:A8:56:C6:DD:2E:63
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 01987D8A4DB3216595F649BC9D342C71F573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:01:12 +0000
Manifest this update: Wed 06 Aug 2025 04:01:12 +0000
Manifest next update: Thu 07 Aug 2025 04:01:12 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: DTF8n/+zTlqpCS9gPGFZ7yokUZ5A6/yb5BGJLFmE9JQ=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:4d:b3:21:65:95:f6:49:bc:9d:34:2c:71:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Aug 6 04:01:12 2025 GMT
Not After : Aug 7 04:01:12 2025 GMT
Subject: CN=d990a4fb547f7e5eba36d5ee078ba856c6dd2e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:1a:9a:9b:96:85:00:3d:35:e6:88:fb:76:
69:1e:c7:75:78:cf:a2:3a:54:ad:79:ba:85:d1:39:
6f:5e:b8:c7:da:d3:97:dd:dc:fa:c6:f1:27:f0:5a:
e6:2a:a2:e9:f5:9b:0f:77:06:a2:5a:64:65:37:8b:
a9:ca:d7:75:6c:08:85:99:35:15:31:9c:f2:56:9f:
2d:d9:85:82:14:55:2c:2f:6e:c2:05:f0:e5:48:d9:
25:bd:26:f6:f2:30:23:08:11:31:37:13:ac:62:3e:
44:90:4e:8c:fb:b7:af:33:c0:6e:8f:97:f1:67:82:
d3:5d:71:d9:4c:e9:4c:27:a2:68:8c:e7:4f:b7:e7:
22:b1:3c:85:fc:b3:0f:7d:43:27:7f:b6:1a:7a:c4:
9f:00:16:c9:aa:d8:05:88:57:6b:81:7a:7d:9e:f4:
83:be:34:5a:4e:ca:69:58:7e:2c:3e:18:38:38:6c:
e7:2b:b3:92:d7:ac:35:d7:96:aa:b2:1c:64:5f:4a:
17:47:3d:7b:4b:96:00:06:c7:06:b2:cf:62:7c:60:
39:ba:77:3c:ee:cc:04:31:fd:c1:97:2c:40:5f:01:
0f:40:09:cc:8b:c2:bb:68:79:0f:cc:d6:f5:e1:5d:
3f:01:03:93:55:c5:48:b5:72:68:84:0d:87:f0:f2:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:A4:FB:54:7F:7E:5E:BA:36:D5:EE:07:8B:A8:56:C6:DD:2E:63
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:90:48:03:f9:43:f9:f2:7e:28:10:de:d6:d1:a4:0b:bf:da:
52:77:b4:c6:6e:58:d8:ae:6a:ac:06:fc:37:a6:fe:53:fa:b3:
db:1b:57:44:49:d2:9d:d5:29:bc:c5:d7:86:b3:ae:06:99:9a:
86:53:9c:95:14:d5:88:06:9f:14:44:67:1b:60:16:86:1a:87:
9c:70:24:e0:f6:75:86:9f:81:85:23:24:37:37:bb:f5:dd:fe:
3a:a8:00:e1:02:dd:e5:21:5d:db:33:b3:6f:f1:67:be:57:fe:
f4:b3:a4:91:80:ff:d5:a3:83:83:dc:41:10:d4:e9:63:ce:6f:
11:af:ae:b8:ff:1a:bc:88:d0:f0:32:f5:9f:67:8b:e4:7b:59:
96:3c:92:d3:d8:11:8d:ff:4f:63:58:c9:2a:86:25:7f:69:ee:
60:75:d4:3b:d3:fe:54:50:3a:3d:2e:46:43:3b:c1:f3:a4:2a:
cf:43:2e:ae:ed:81:1e:39:e1:c7:b2:c9:52:1b:dc:2d:5d:d2:
82:0f:0c:40:42:9d:1c:a5:fa:ee:55:4e:bf:ee:05:29:55:be:
67:4e:be:6c:5a:b9:a4:f7:3c:41:14:04:41:52:62:6e:f2:c0:
b3:f9:63:ac:2c:10:2e:66:3a:b0:96:b7:3e:dc:70:2b:c9:91:
18:80:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:54 2025 by rpki-client