Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: 9zWqp+ApuGS7cqygSApZHSVWMZy84S7KTR8u1O5pxbo=
Subject key identifier: 1A:5E:F3:A3:26:E7:6A:36:1A:B7:DC:0A:AE:BD:9B:C4:C0:7F:CC:0E
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 019873E37E9ED3BAFE706F3E17C3685E3C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 029A
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: 6PvkmmEIZW5B7O+tfH7yEqbC5hjCgoMte5DoN9ZVkkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7e:9e:d3:ba:fe:70:6f:3e:17:c3:68:5e:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=1a5ef3a326e76a361ab7dc0aaebd9bc4c07fcc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:29:3e:43:ef:4a:9b:62:cc:ed:b8:3c:42:
28:68:79:ff:5a:ad:3c:66:54:cb:96:97:7b:4e:1a:
3c:45:0e:06:c9:40:1c:2c:1b:cb:8e:3e:72:4d:3e:
56:8b:99:1b:ea:0b:47:c9:ca:ce:2e:b7:5e:7d:06:
81:c0:20:6f:a7:cf:9c:87:23:5e:46:25:60:47:01:
1d:df:5b:1e:75:9a:e3:f2:31:18:fd:00:6b:e3:f1:
41:a0:63:a3:7e:47:17:b9:4a:07:c3:98:2f:40:69:
26:82:eb:07:45:83:ef:27:ed:c8:24:d0:b0:98:fd:
6a:21:9d:b7:5a:76:93:8a:35:27:98:d0:48:6a:89:
a7:c0:e5:b7:32:ff:4b:6b:24:46:a8:d7:2f:d3:09:
96:a5:72:90:82:70:d8:64:8e:d3:a8:30:1c:c8:6a:
8e:9c:c5:94:06:cc:f7:40:93:d5:38:46:7b:b8:73:
e9:8e:41:e7:9e:c3:e8:34:1a:c3:31:c1:77:72:0e:
19:15:a8:56:d8:55:cf:ea:ba:9f:74:e2:2a:24:36:
28:76:af:34:c4:91:a8:c6:0c:76:b6:7b:82:ed:3f:
a1:41:43:9f:8d:26:b6:8a:24:73:7f:6c:99:76:e0:
2d:4e:03:00:bb:36:a0:51:4a:4a:bb:eb:f8:54:30:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5E:F3:A3:26:E7:6A:36:1A:B7:DC:0A:AE:BD:9B:C4:C0:7F:CC:0E
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:98:43:ab:df:86:53:ac:59:9f:df:ca:80:cb:63:f3:da:67:
99:f7:6c:6b:16:31:7c:13:9a:15:50:85:d9:f3:fa:6a:db:a3:
73:e6:6a:fe:b8:63:8c:8f:35:44:0b:dd:5c:dd:6a:87:01:2d:
cf:38:36:38:f5:7a:64:78:69:a1:c1:b5:80:b3:fe:7e:e0:a3:
d6:05:43:bd:ef:6c:4b:71:6a:95:81:50:2e:c5:21:84:79:f8:
32:89:ae:0f:48:57:77:bb:67:4c:4c:be:b2:52:d1:22:06:0e:
d3:5f:e0:42:8f:c2:41:1a:fc:9d:e3:36:b0:8e:36:ce:88:84:
a6:dd:e8:9a:05:3e:d5:44:24:28:1d:ac:e7:27:63:9a:1d:96:
99:c2:7d:60:79:03:1e:44:dd:33:b0:8a:09:41:76:99:e4:5a:
5c:4f:9d:f4:67:ca:29:a8:d6:e5:22:34:95:00:ba:00:4c:a4:
b2:bf:42:c1:63:b1:39:c6:87:16:2e:d2:4a:c8:f8:82:01:35:
47:56:38:dc:68:20:a6:46:b7:71:2a:ca:67:8e:fc:59:fb:bd:
a9:d8:c4:ec:9f:72:4d:0a:ac:c0:95:9e:ca:ca:ad:ff:bf:98:
7e:85:68:9a:79:35:ce:9e:a1:c8:54:eb:31:0f:5d:22:db:c6:
a8:f2:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:06 2025 by rpki-client