Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: b1yVxRiwIncZ2CRTbk9EeHNSjqo6/JSwJXiavImTGKw=
Subject key identifier: AD:97:72:FE:50:BE:0F:6F:7A:A3:BE:97:70:61:2F:D3:48:38:F3:20
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0198737486F05DBBFC8CC0B5E97B84C8D221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:01:13 +0000
Manifest this update: Mon 04 Aug 2025 05:01:13 +0000
Manifest next update: Tue 05 Aug 2025 05:01:13 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: 3nJMdF8vLM/wa/dbVllshF0M49Aa083x6m3JUq6i/EQ=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:f0:5d:bb:fc:8c:c0:b5:e9:7b:84:c8:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Aug 4 05:01:13 2025 GMT
Not After : Aug 5 05:01:13 2025 GMT
Subject: CN=ad9772fe50be0f6f7aa3be9770612fd34838f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:2b:ef:82:d9:a7:ca:6c:2d:82:2e:09:86:
8f:78:43:14:cb:72:e6:d9:a4:23:32:94:a4:02:4f:
1e:0e:02:4f:e7:f5:d8:5e:fe:96:88:4e:e4:5e:6b:
16:96:4c:85:44:8b:28:06:8f:a1:6e:fc:b4:db:d1:
09:84:9a:eb:53:f3:06:ae:54:75:36:cf:65:f5:35:
0f:15:05:b3:30:45:08:6c:60:1c:aa:03:f9:ba:f2:
55:bd:7e:1a:53:8d:0e:60:ea:fe:41:ba:b7:43:b1:
8a:62:cf:3d:95:57:a4:96:21:e8:54:38:56:3d:c8:
85:1d:1d:f1:fe:6d:6b:e8:8e:5e:42:c5:7a:d1:28:
27:73:41:f8:d2:bf:53:22:d3:04:7b:64:5f:77:0b:
13:30:2f:2f:26:cd:f6:a1:a1:26:3a:1c:f0:68:d9:
ea:89:f1:38:27:2d:a7:54:2e:27:fd:28:b3:2e:0a:
51:4f:db:b8:8c:a5:1a:10:b7:0a:7f:b1:8e:af:19:
ce:c5:4d:24:ce:4d:a6:de:bb:f8:f0:cc:a4:a1:b4:
0f:9a:2b:d1:26:a1:3a:f2:fc:b4:2b:84:21:23:54:
dc:0e:fc:08:4d:b1:2f:21:58:3f:24:4e:93:7f:89:
85:c6:8c:c0:95:e3:95:80:0d:30:60:96:09:67:29:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:97:72:FE:50:BE:0F:6F:7A:A3:BE:97:70:61:2F:D3:48:38:F3:20
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fc:a2:ff:20:37:a6:66:68:bd:0f:a8:0c:73:60:4a:e1:1f:
4d:89:3a:b7:6e:16:f0:af:fc:8c:dd:55:a4:d3:cb:1d:dd:aa:
6e:ec:21:f5:00:8c:32:64:a3:a6:49:78:c9:47:4e:b6:4a:2b:
44:cd:15:59:dc:cb:d7:94:0c:b6:67:94:cf:08:fc:b4:0e:91:
51:04:84:1d:bc:23:66:86:cf:e8:3c:48:3a:51:fc:f2:28:a0:
b6:5d:86:18:53:8e:97:6b:4e:e1:e3:b9:85:91:fe:38:34:e4:
54:7c:5e:7e:0a:fd:f1:b0:b4:c1:0f:3d:2d:15:02:d0:1e:1f:
11:b9:42:1a:76:00:9e:1f:99:89:2f:fb:bb:89:94:a5:ce:d8:
c2:b4:59:ac:67:dd:b0:07:b0:c2:76:f0:6e:5e:f4:0a:54:a4:
f1:65:e3:4c:30:d2:50:20:ae:17:fa:3d:80:d5:8b:f9:71:97:
d9:b2:2d:af:07:a3:bc:9d:11:c1:44:b2:da:af:56:14:75:ba:
17:08:83:fd:39:ba:ee:c9:db:c2:c1:0f:eb:c0:54:40:75:b1:
1c:39:f4:60:a7:ce:eb:f4:dc:f1:a2:c0:77:c6:a2:32:e6:78:
a6:06:36:ee:76:94:43:0c:59:be:4e:55:66:99:6c:ca:23:91:
90:c0:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:38 2025 by rpki-client