Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: JMWa7/2KgZzIiPqph8hN+648r1OY2E/p11rzKdSv2vQ=
Subject key identifier: 66:8C:C5:3F:7F:48:08:BA:13:03:37:3D:6B:0A:8D:4E:BC:61:07:A2
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 019882B0F1592398C08562097948D9CE2B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 04:01:30 +0000
Manifest this update: Thu 07 Aug 2025 04:01:30 +0000
Manifest next update: Fri 08 Aug 2025 04:01:30 +0000
Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: 20xuUm9jdEo7k2R/ptJHb3tm2LLY77lRwm/35kDs/u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:f1:59:23:98:c0:85:62:09:79:48:d9:ce:2b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Aug 7 04:01:30 2025 GMT
Not After : Aug 8 04:01:30 2025 GMT
Subject: CN=668cc53f7f4808ba1303373d6b0a8d4ebc6107a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:7a:ef:d4:94:23:c0:64:9a:5c:53:d2:f6:
e0:7f:33:cc:2b:38:24:07:0d:57:40:fe:ab:1a:be:
3e:44:19:f3:62:42:27:31:fb:15:34:c2:6b:13:0e:
4a:47:45:bc:e1:ec:fe:8c:13:aa:0a:37:e3:4d:d5:
bf:e2:85:c7:91:89:14:cf:0d:86:d1:c9:ee:c3:0e:
eb:61:e2:e2:ec:1d:e4:9f:a7:1a:74:37:06:7a:ac:
07:ae:12:da:17:c3:bf:f4:a8:9d:28:3a:0f:f1:a1:
fb:ca:0e:1b:0c:82:a2:3d:75:fd:a5:1c:29:e4:bb:
cb:fc:55:3f:13:5b:e9:ba:49:45:45:3e:95:3f:c0:
06:70:2b:56:52:a0:4c:5f:de:02:bd:92:8f:a1:c1:
b7:dd:7f:d4:d1:89:bb:2e:17:ad:a6:53:3e:02:1c:
b7:70:9f:0a:23:df:17:f3:07:81:f8:45:e3:41:f8:
78:6c:6c:44:d8:60:2c:3e:42:ea:d9:80:4f:7b:48:
67:65:af:22:4a:0b:a4:72:ad:55:44:d9:81:19:61:
68:d1:3e:5e:1e:1a:da:11:16:38:32:c7:40:dd:73:
3e:62:92:79:10:24:54:1d:49:70:e8:1f:fc:75:db:
5a:e6:2b:b0:9d:60:2d:b7:9f:e6:1a:7e:5e:b3:a7:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:C5:3F:7F:48:08:BA:13:03:37:3D:6B:0A:8D:4E:BC:61:07:A2
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:8c:1c:f3:6b:ed:47:61:03:9a:f5:3b:b0:40:40:cd:73:
bf:23:55:f5:66:28:02:de:6e:b5:41:37:ff:53:cb:f4:b2:9a:
4f:3b:e7:2e:d6:f2:2f:11:f0:ef:47:0c:64:6a:7a:c2:5d:b8:
99:b8:66:48:71:11:1e:94:bc:0d:3e:74:41:18:69:6c:5e:52:
3d:af:d7:45:82:37:6e:92:bc:0c:64:a9:7a:df:2b:22:bb:56:
64:e2:e4:ed:29:73:f7:f1:84:54:12:f2:9d:aa:5c:4b:4d:be:
c4:62:ec:3c:bc:c8:16:16:0b:86:18:80:bd:76:a6:b1:d1:37:
74:64:be:40:87:eb:5d:c8:0d:55:f1:cf:60:c7:27:0e:5b:0d:
32:86:95:bb:65:19:3c:2e:20:51:91:35:ef:8b:be:d3:25:b3:
83:b2:2b:1f:9f:3a:ee:d7:06:d3:95:fa:cf:1e:82:ad:01:d6:
47:a2:3a:fe:aa:a5:21:f2:98:7c:57:fe:19:02:77:25:a3:e4:
d4:0c:62:ea:21:ed:fa:f7:07:95:99:df:73:cc:5c:9d:3a:65:
17:00:45:3f:dc:b2:17:73:94:99:de:50:55:bb:d2:15:c8:7d:
7e:55:12:a3:a1:31:90:6b:90:ac:87:26:8d:45:e2:5c:8c:cf:
3e:09:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:30 2025 by rpki-client