Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: IKK8+DK43GvLGRbO25E/1qKQE2A1BILO2jadT9BStMg=
Subject key identifier: 5B:57:29:1E:F7:FD:E9:CC:60:DD:D1:FC:01:CB:DB:53:F5:D4:B8:0F
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 01987D1C5144B12741B4CA3D851C983BEDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 05C1
Signing time: Wed 06 Aug 2025 02:01:04 +0000
Manifest this update: Wed 06 Aug 2025 02:01:04 +0000
Manifest next update: Thu 07 Aug 2025 02:01:04 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: 3W/n1py6/IthgG07BNWIPAySQpelILLLTo4A1oAmV5U=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:51:44:b1:27:41:b4:ca:3d:85:1c:98:3b:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Aug 6 02:01:04 2025 GMT
Not After : Aug 7 02:01:04 2025 GMT
Subject: CN=5b57291ef7fde9cc60ddd1fc01cbdb53f5d4b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:8a:ee:81:67:47:dd:c0:c0:04:21:29:7c:
64:02:d4:ac:87:4d:43:ff:19:f0:cf:f1:2a:87:ac:
8f:b4:6f:51:80:ee:03:bf:39:76:bf:e4:6e:92:f8:
5a:a6:39:3f:90:cf:34:d1:4b:7e:c1:27:bb:0a:5c:
f8:d2:90:f9:af:12:1b:ee:a0:1d:8e:a0:88:19:b4:
f0:4b:32:74:91:60:76:81:15:c2:f9:43:61:c3:89:
4c:4a:9e:49:58:52:8f:a1:4a:e5:4d:37:34:20:4b:
9d:04:01:fd:2f:3d:02:be:2c:51:30:48:68:0a:b0:
0f:71:ee:4d:79:8d:d8:70:97:77:05:20:08:1d:03:
2f:49:42:b8:dc:0c:94:fc:e7:fe:b6:50:77:cb:f2:
03:21:3d:3f:2b:0c:bf:74:cd:fa:46:3a:2d:16:5b:
68:96:a5:0c:a0:35:e5:6f:bf:c5:ae:a3:80:bf:f8:
3f:ed:cb:9b:8d:69:8e:ef:8f:bc:93:25:e0:1b:d0:
f9:1a:45:01:c2:3f:93:c6:fc:ff:6b:32:4c:4f:77:
b0:87:c8:e0:d0:30:3a:f1:76:99:66:35:aa:0e:1f:
77:04:3e:71:2d:99:e8:2f:98:5e:a9:99:4b:4c:5d:
a1:81:66:f2:15:75:82:ec:b2:5f:e5:43:76:01:29:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:29:1E:F7:FD:E9:CC:60:DD:D1:FC:01:CB:DB:53:F5:D4:B8:0F
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:9d:2f:78:96:e9:21:21:22:69:34:b6:37:04:aa:6d:ff:
80:07:36:96:03:bf:58:59:cd:80:00:1c:64:61:34:b8:e5:48:
02:d6:34:92:49:94:77:ab:63:e9:d4:b7:fd:d2:8c:ab:b4:32:
c3:74:b1:58:77:4f:51:f4:49:3a:34:6f:78:44:6a:7b:2e:13:
d7:f6:c4:8d:02:24:27:6e:a1:0a:3c:d8:72:84:53:11:6e:2f:
07:61:8b:e3:e2:0e:92:56:0b:e4:34:74:2a:d9:a6:0a:9a:4f:
b2:0d:24:81:5d:61:21:0f:62:40:24:e4:fe:fb:99:f7:4e:1b:
22:f3:9a:a7:c5:42:b4:2a:69:0f:77:dd:5d:63:53:60:51:ad:
36:1e:4e:47:bc:02:47:c2:69:e4:0e:96:91:4a:ce:9a:fc:1f:
e1:5a:84:6d:ef:1c:f9:32:6a:1e:e8:2f:41:19:67:c8:16:74:
cc:88:a5:c8:60:48:22:ae:49:d9:d3:f3:5b:df:1c:09:9f:26:
0c:27:a6:9a:4c:44:26:70:4a:8e:bc:66:be:00:52:66:e1:cc:
b6:53:88:6d:a6:bd:b4:a2:ad:9f:93:38:33:7e:72:1c:b9:65:
54:cd:98:16:11:cc:27:2d:77:7e:7f:6d:dc:4e:b9:64:e4:bd:
09:c4:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:35 2025 by rpki-client