Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: ydZylvVvJ7asiOvaBlbmMPjptMtd0wZPZjGPnDOucn4=
Subject key identifier: DC:4E:7F:92:0B:C1:A6:D6:0C:79:66:B8:13:D9:94:B4:78:56:32:D2
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0198831E08A54FC67E49FD8E2D77D959FD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 027A
Signing time: Thu 07 Aug 2025 06:00:40 +0000
Manifest this update: Thu 07 Aug 2025 06:00:40 +0000
Manifest next update: Fri 08 Aug 2025 06:00:40 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: vjuvGgj+HMmXTsSljZsyJ91LwvBF3oBkdxsHMxjXGZM=)
4: yDLDs_9-xCJNS7Lq59X6rTIHpaM.roa (hash: mZAephRDHWr1NJfSrOQS8hE88/V7vwaKpzI1ny1rx80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:1e:08:a5:4f:c6:7e:49:fd:8e:2d:77:d9:59:fd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Aug 7 06:00:40 2025 GMT
Not After : Aug 8 06:00:40 2025 GMT
Subject: CN=dc4e7f920bc1a6d60c7966b813d994b4785632d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:0a:09:4a:87:be:8d:f7:1c:57:5d:b9:a9:
fd:ca:de:73:ff:74:d6:a1:12:67:4b:c4:3d:5b:40:
cd:81:32:06:6b:ff:a6:14:8f:10:ac:63:c6:bf:db:
5a:45:77:9a:da:4d:a3:e1:e3:49:5d:7b:c4:9c:44:
00:06:69:cf:72:75:66:68:7f:88:05:0d:3b:ad:2b:
13:49:45:90:89:f8:c5:aa:8f:02:a5:2e:b7:e6:72:
20:e7:bf:c1:9c:5b:98:bf:6e:9a:b5:0a:2a:cb:8f:
4c:7f:03:a9:6c:fc:86:a8:07:41:4d:4c:f6:1f:ac:
c1:ae:4e:94:59:c2:26:a1:0b:5c:4a:66:46:dd:d7:
1c:c7:7e:d1:3b:32:a9:63:a3:95:b0:c2:37:ea:eb:
6a:80:0d:e8:76:0e:49:8a:c5:9e:73:f3:ed:79:86:
f6:54:f4:5f:0a:cc:b1:f4:69:5a:af:19:11:cd:af:
3d:da:f9:11:b8:ff:a6:f5:60:8e:2d:aa:12:42:98:
b4:85:cc:2a:21:e1:4f:7a:74:cc:89:cd:67:9e:d5:
91:84:bc:0a:47:b1:34:cc:05:00:dc:b0:c9:ec:ae:
e7:56:fb:58:08:1d:69:ea:5e:0d:5a:02:34:64:08:
91:92:fe:6f:cf:2b:6b:e4:96:7b:0c:33:6d:d8:1e:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:7F:92:0B:C1:A6:D6:0C:79:66:B8:13:D9:94:B4:78:56:32:D2
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:ad:bc:38:1e:d6:35:d5:28:4d:f8:a8:e8:5f:29:93:b6:
21:da:a7:4e:87:20:84:b9:37:ef:11:ba:7a:f5:2d:10:81:00:
19:fe:ae:56:04:0c:e2:3e:aa:10:35:86:66:c5:19:27:9d:4d:
03:c3:0b:1e:29:fb:0c:08:23:1d:69:ab:73:95:b8:bd:55:c8:
37:9d:53:68:d4:82:71:84:17:27:85:ac:0d:58:07:24:54:a1:
be:14:f5:f1:55:59:35:95:37:54:59:7b:b8:20:88:fd:12:cc:
a2:7f:69:d7:d0:78:85:ba:8d:db:19:e1:34:75:3f:a3:f5:29:
d1:c7:a7:67:7b:2b:d8:dd:9a:c3:c8:eb:66:ef:19:02:86:79:
b3:38:2b:2c:b2:15:a0:14:94:07:5b:07:58:8f:25:49:dd:02:
34:95:9f:39:69:8b:8d:0c:9f:5b:3a:55:c5:fe:5e:83:d2:b1:
04:eb:8d:fc:a2:06:7b:eb:79:c2:a4:9a:f3:25:32:d3:21:5a:
bf:cd:c7:e7:3a:bc:5d:fb:99:fa:15:6a:54:cc:b7:1f:7e:00:
0c:2c:db:e2:a4:cd:d4:29:66:2c:d8:90:64:53:eb:cd:b3:bf:
0e:2c:3e:4a:27:ca:4e:f5:1f:76:3e:26:51:6b:3e:cd:b2:b9:
38:e4:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:24 2025 by rpki-client