Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: K2d3UmOKBWVfuUdNt4DML2XSanI1MTrMBC9MjhNwzQM=
Subject key identifier: AB:18:1B:A6:47:C0:57:BC:BC:36:D6:C4:11:F1:10:3A:DC:07:8C:9F
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 01988B455F3929FF11C988EFEA20DA5D74B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 20:00:35 +0000
Manifest this update: Fri 08 Aug 2025 20:00:35 +0000
Manifest next update: Sat 09 Aug 2025 20:00:35 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: bgn1GRCGla3QHlCTI75raSUb49zo+j3yiteCUyinbuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:5f:39:29:ff:11:c9:88:ef:ea:20:da:5d:74:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Aug 8 20:00:35 2025 GMT
Not After : Aug 9 20:00:35 2025 GMT
Subject: CN=ab181ba647c057bcbc36d6c411f1103adc078c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:de:c5:7f:fc:81:d6:9a:3e:02:e3:72:99:
9c:92:94:a2:e3:1c:c5:e1:92:6f:86:de:b2:a6:d3:
e8:fa:88:59:5b:4f:ea:b5:2f:78:6d:b3:e5:8d:09:
64:a1:30:54:ad:d6:11:9d:74:35:77:88:c7:f3:51:
c0:95:3a:40:86:7f:60:e4:f1:15:38:9f:d3:f2:fa:
82:d5:f4:92:c0:02:f8:1e:90:6c:9a:96:66:1f:b2:
e2:b9:af:b2:d1:1d:0e:ea:4b:c9:bd:08:01:94:99:
21:3d:2f:db:f0:fb:61:6d:c8:e3:c9:96:b7:1e:ed:
43:70:a7:de:59:e8:22:92:3f:8a:b0:61:1e:82:9f:
62:5c:62:b3:d5:5e:9e:10:d5:86:ef:a0:0b:25:5a:
d5:0d:02:71:37:de:71:6b:08:9c:98:49:f2:16:4e:
20:18:f9:49:61:db:5f:30:4c:a1:92:42:d7:04:8a:
3d:85:0d:79:c6:d5:2f:ac:25:5b:4b:19:fc:02:a1:
15:06:cb:97:18:30:38:15:37:a6:a2:ff:04:bc:04:
ab:7a:db:62:c3:73:08:b2:fa:10:bc:90:5c:45:68:
89:c2:2a:ec:59:44:d9:0e:14:22:1c:12:c3:cf:9e:
96:80:dd:7d:ee:f9:20:8c:ae:d9:fd:33:a7:ec:e6:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:1B:A6:47:C0:57:BC:BC:36:D6:C4:11:F1:10:3A:DC:07:8C:9F
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:47:fd:6c:9a:89:76:4e:e9:e2:1a:69:c9:48:ab:e4:64:35:
41:f6:ad:69:8f:d8:2d:6d:88:8d:4b:51:91:55:34:5d:49:93:
2a:a0:3a:cc:c9:2e:e5:d9:10:37:fe:34:54:c1:cc:7d:ae:5a:
09:70:75:1b:3e:0a:5d:93:9b:d8:a7:57:63:ae:4a:0b:8e:e7:
69:8a:51:49:de:68:da:5a:d7:e6:e6:41:16:b1:2f:99:e3:a1:
56:51:f2:89:60:aa:a5:06:e9:c6:f6:1e:79:4d:ae:f1:bf:1e:
ee:57:6a:cf:5e:d8:d4:f8:e4:f7:54:6a:d9:4f:2f:31:e2:5b:
99:44:2a:82:84:ed:5e:4e:48:47:40:ba:af:34:7c:25:75:8c:
b9:4c:76:4d:40:cc:d4:bc:cf:6b:90:86:fa:e4:fb:a0:fa:a3:
b9:4f:7b:c5:17:18:53:66:87:e9:0c:5f:db:d4:06:23:d5:43:
bc:c1:48:73:fa:ed:a7:cc:72:cc:c1:53:ca:a7:7f:57:6d:a5:
20:94:2f:33:7e:78:dc:2f:62:7e:15:f9:e2:19:b1:8a:cb:3a:
41:15:b4:02:3d:a4:7c:8d:17:7c:c7:20:99:59:21:f7:9c:0a:
7e:24:16:03:c4:f8:a5:c3:a3:c5:f5:78:d3:2f:75:84:66:db:
ae:4f:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:58:45 2025 by rpki-client