Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: mIRQ9TFR+WL2Gc+k6sM36lCtbjF+iFlV7QCuCdV6FQo=
Subject key identifier: 0D:DA:55:0C:C4:7F:F5:A5:6D:36:F7:53:B8:70:FD:56:94:C2:F4:6D
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01988C5865F93C7A79C891BB3957B72AC7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1620
Signing time: Sat 09 Aug 2025 01:01:00 +0000
Manifest this update: Sat 09 Aug 2025 01:01:00 +0000
Manifest next update: Sun 10 Aug 2025 01:01:00 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: iEcLELz7dI6qLHYVYY/G7UHWfBe8z0k8ZSCoMv7+B7U=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:65:f9:3c:7a:79:c8:91:bb:39:57:b7:2a:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Aug 9 01:01:00 2025 GMT
Not After : Aug 10 01:01:00 2025 GMT
Subject: CN=0dda550cc47ff5a56d36f753b870fd5694c2f46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:98:ca:39:85:a9:83:e6:47:3f:88:fd:a0:
84:82:ce:4b:d8:0d:25:cd:6a:c6:c7:63:54:f9:f8:
de:d6:3a:d0:cf:66:fd:10:c1:d1:9e:b4:61:a8:48:
3e:84:72:40:61:48:03:66:07:b5:54:03:f1:fe:2b:
48:39:e5:6b:f2:66:82:da:74:59:41:d5:1c:e2:81:
2a:02:76:3c:4c:14:d2:83:bc:51:e1:00:ad:9d:0c:
88:18:78:d0:29:ee:52:30:99:ba:c9:95:8e:15:77:
7c:e9:6a:94:5f:1b:b8:e3:cc:ce:97:2c:f6:f8:80:
f4:e2:82:64:a4:f4:e2:43:f2:d4:d9:40:eb:cf:01:
e5:af:85:e8:d0:19:4c:45:14:6f:77:bd:ae:24:14:
a0:7e:ad:08:4d:19:9e:53:c6:93:67:ad:9b:43:c0:
c6:95:0a:3b:37:e6:93:b6:7c:2c:18:f1:b3:d2:68:
0d:ac:b3:3c:94:f6:9e:9c:83:84:2a:30:59:ff:ad:
1a:63:bf:5c:24:e9:af:2a:27:a8:c3:47:e2:04:fc:
10:46:dc:1b:31:77:29:3b:06:02:ca:2e:f5:7f:9d:
b0:ff:76:a3:40:fe:a2:87:62:7a:6c:3f:f6:22:66:
d4:f1:b2:cf:41:99:22:a0:73:9a:c4:a6:6a:ff:99:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:55:0C:C4:7F:F5:A5:6D:36:F7:53:B8:70:FD:56:94:C2:F4:6D
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ea:35:3a:78:02:92:c2:72:21:6c:8a:6a:1c:79:b5:22:3d:
34:48:42:4f:1a:6f:d7:c4:fc:9c:1a:f7:02:44:cc:68:c6:6a:
23:07:30:42:0a:ea:58:fe:54:f2:82:4e:44:58:33:a9:55:9d:
e6:18:a8:5d:85:13:b1:c9:29:fc:08:8b:b0:11:0c:7a:90:7e:
ff:8a:89:0d:54:64:59:7e:bf:a4:bc:db:24:92:0a:65:d8:19:
e5:f2:41:e7:4c:f4:ed:c0:c4:9d:2c:67:db:c4:a5:8e:ee:44:
d1:b3:a6:7d:7f:f9:7e:a5:b5:c0:8d:d1:d8:d3:ba:3c:4c:e3:
7e:f7:14:a7:eb:73:44:76:9d:49:ed:de:c0:4f:41:ec:bc:e2:
96:d5:95:5e:57:14:4b:c5:97:2f:ab:d6:c4:a4:89:7c:77:14:
7f:6e:f9:2a:27:0b:4c:54:16:95:20:d8:17:bb:e7:c5:65:04:
3d:de:6b:10:27:2b:b3:98:2f:5b:67:68:1e:48:ae:70:31:cd:
53:5d:1a:94:ca:68:49:8f:a7:bc:80:db:8d:d9:ba:e6:a8:81:
e0:11:e1:46:7c:e2:31:fe:ea:f0:29:68:31:17:50:f3:a8:5f:
74:7a:fd:05:5d:18:82:55:36:f9:45:f7:1e:aa:62:1d:17:26:
d6:1f:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:23 2025 by rpki-client