Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: 1GQKMyJ91FTWtMBK6D+RWvoK29G6JpVkvwXiEhHCeSo=
Subject key identifier: F7:30:4E:A9:2C:05:1A:6B:7C:47:30:2A:D4:0C:B8:A9:DC:A1:EA:25
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 01987B2D6FBEF35851BF6F37FA25AF33C593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0940
Signing time: Tue 05 Aug 2025 17:00:31 +0000
Manifest this update: Tue 05 Aug 2025 17:00:31 +0000
Manifest next update: Wed 06 Aug 2025 17:00:31 +0000
Files and hashes: 1: 9kQSFx9NBgdYOUE_u_QQ1xrVHjM.roa (hash: nF34ztaCx4lsDpWaNHXR5tZ2u4WJ9TVd0nOUtCtY/2Y=)
2: d2kR6d3TC7hLx-LY_yPrSHmZEqk.roa (hash: bktunr76fWYhMzD/+mLyc6QoNibWe0J9osON7R46Nkk=)
3: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: O80kHE1+f2pD2Hj43E5kUEciDWutfNdnvFJunkR2Ihs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:6f:be:f3:58:51:bf:6f:37:fa:25:af:33:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Aug 5 17:00:31 2025 GMT
Not After : Aug 6 17:00:31 2025 GMT
Subject: CN=f7304ea92c051a6b7c47302ad40cb8a9dca1ea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:82:e2:ac:37:84:10:10:99:3f:35:66:1a:
60:cd:ac:0f:72:8a:f6:21:73:fa:35:c3:f7:7c:cf:
12:ef:8a:8d:39:9a:53:25:f6:cf:ad:fd:0e:91:ac:
40:67:fd:f7:87:4f:c3:f8:9e:1e:e2:76:47:cd:e1:
1b:b7:51:08:09:2b:74:c7:fb:58:a9:50:82:3a:09:
74:ef:70:ab:3b:27:de:95:b1:8a:0c:a3:94:ea:2b:
81:0c:0d:91:42:ab:5e:3f:12:38:d0:8d:66:18:c5:
e8:68:2e:07:52:1a:d6:09:e4:35:4b:a6:68:dd:e5:
e7:e4:05:0b:fa:fe:67:6f:5f:83:87:27:57:f8:89:
3d:23:98:58:8a:4c:d0:78:d9:56:25:62:57:1f:11:
a2:7a:51:f9:f8:fa:f6:c5:1d:cd:21:65:6b:78:ea:
ba:be:7d:bb:15:d2:80:8e:77:ee:20:c8:45:6f:06:
65:ce:90:ae:5d:6d:54:79:4a:1e:15:43:67:98:6f:
2f:0a:47:de:21:ae:40:ce:2e:0d:3f:fb:c3:97:b9:
3b:62:36:27:01:c9:2f:e8:bb:43:04:3e:f3:68:b3:
0c:94:0d:f0:87:f4:58:0c:2e:68:cc:ae:98:4b:ba:
ac:3c:73:04:e1:b9:41:90:2b:5d:26:73:f4:56:2d:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:4E:A9:2C:05:1A:6B:7C:47:30:2A:D4:0C:B8:A9:DC:A1:EA:25
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a9:d6:21:d7:d2:58:8a:12:a0:19:2e:1c:fd:fc:38:ff:8b:
b5:a9:6b:4b:17:6e:f7:d4:78:1e:bc:29:99:6b:51:ba:83:9b:
62:da:c4:c5:7b:2e:db:4e:f1:2c:88:2b:af:d2:92:e3:cf:78:
35:e6:a7:42:29:64:31:42:d1:00:bb:74:4a:ce:8b:46:61:1b:
c7:2c:a6:5c:4c:be:27:b3:e3:d3:79:fe:05:83:25:45:5f:80:
99:f0:09:67:98:68:2e:80:19:c0:c8:3f:5c:8d:1b:4b:d1:2f:
a5:33:8c:32:db:c2:18:e7:cc:c2:74:87:eb:a7:76:82:e5:2b:
39:6b:a5:6d:61:c9:86:c0:d5:04:26:f9:2f:bc:29:e3:1a:57:
b3:f3:c5:e5:23:8b:d0:a6:98:1b:39:14:c5:df:fd:95:6a:c0:
4d:fc:43:6f:57:92:9f:fd:23:5a:7e:3d:8b:7d:1b:34:ca:18:
8e:05:e0:9a:ef:0d:01:7e:9d:33:1a:91:8d:c4:49:58:a9:d4:
95:5a:69:12:fd:6b:3c:a6:e1:4d:77:e8:67:8e:56:c3:c0:55:
ff:d1:57:bc:e0:68:0c:87:3a:ea:f2:68:0f:61:0f:4a:e9:d2:
bf:74:28:ff:86:04:c1:47:8f:ce:a8:a4:78:40:0b:74:03:40:
41:89:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:02 2025 by rpki-client