Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: 2vMT2mLDxVQ/w333ZFK4vtpfakAXpyx9Dn3FjZH2BfU=
Subject key identifier: 63:82:46:B7:F4:86:3D:EF:E4:1D:82:7C:78:9F:0D:45:8F:44:54:93
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019874BD74F29EF88B8DEC8BA14558CF9A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 1407
Signing time: Mon 04 Aug 2025 11:00:29 +0000
Manifest this update: Mon 04 Aug 2025 11:00:29 +0000
Manifest next update: Tue 05 Aug 2025 11:00:29 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: P5kPWcuWnkV3Mz1sQKXZfMmrJm6VWic5pMnDLdbRUcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:74:f2:9e:f8:8b:8d:ec:8b:a1:45:58:cf:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Aug 4 11:00:29 2025 GMT
Not After : Aug 5 11:00:29 2025 GMT
Subject: CN=638246b7f4863defe41d827c789f0d458f445493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:01:47:f5:28:be:67:b4:a0:42:b6:29:b7:
c0:04:dd:ae:86:3a:2d:ff:6a:0a:64:a5:92:40:aa:
63:8c:4f:77:f7:98:59:c1:21:03:0f:f1:cd:c3:ec:
8e:7e:d3:c3:13:97:f9:65:3d:bb:2d:5f:24:3e:1f:
d2:71:1e:bc:97:12:20:87:1e:a7:a2:7a:d5:9d:d5:
fc:19:c4:f9:04:fc:a2:8a:af:2c:b7:8a:e6:f0:eb:
7c:44:93:33:c4:2f:1e:c2:7d:ee:98:38:62:58:c5:
17:9b:af:fc:e7:ab:48:11:7d:89:06:89:c7:a2:64:
d1:c6:70:58:2d:86:08:2b:13:05:1d:2e:c2:b4:34:
11:eb:f0:61:7a:08:5a:cc:0f:a5:7f:a3:50:ae:60:
03:e3:08:50:79:d3:55:17:4a:ae:27:49:f5:0a:61:
96:c4:53:2a:ba:9a:2c:b2:3b:07:2d:6a:13:55:9e:
ae:a6:b8:2a:9e:59:37:75:a9:d2:80:ab:ea:fc:1b:
9b:32:8d:d1:09:71:55:b7:2b:cf:c2:28:47:67:36:
6c:f3:d6:a1:97:3e:b0:6b:e7:67:b3:93:60:26:38:
05:83:1a:a6:0d:29:bf:f3:ce:17:51:bd:dc:dc:23:
5e:de:1b:1a:5e:8b:51:50:2d:2c:79:b2:be:fe:76:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:46:B7:F4:86:3D:EF:E4:1D:82:7C:78:9F:0D:45:8F:44:54:93
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0d:94:5e:38:dc:d2:7a:2f:44:bc:39:03:c2:dc:32:9c:dd:
68:a2:6e:a3:10:14:01:4f:6e:81:6e:6b:08:bd:7b:f7:91:33:
21:d9:8e:a7:09:02:e0:fc:12:1d:74:84:1e:f0:a3:7c:fb:3a:
3c:f3:83:04:43:9a:32:a7:19:fb:da:73:66:74:fa:a8:f5:3d:
b5:ee:6f:28:cc:30:ad:c1:e0:ac:02:a8:d5:bb:81:60:1d:49:
ae:de:e5:dc:cb:44:ee:76:4b:9b:18:b3:3a:2f:c7:83:bb:d5:
4a:19:5c:eb:b8:b1:7c:2f:59:29:91:5c:ed:52:d9:52:cc:05:
fb:55:6a:a5:2d:50:2b:d4:54:d1:bc:2c:4e:3a:bf:1b:09:5a:
8f:95:a0:67:34:4b:fa:45:83:63:0d:ca:f1:bb:14:8d:ec:bf:
c2:ab:62:fd:0c:1d:cb:9a:6a:f5:fe:44:90:65:19:db:a1:a2:
af:fb:4e:ac:89:8c:0c:66:a4:e9:7c:dd:54:af:f5:07:94:2b:
99:eb:37:53:c8:67:89:f2:53:34:b6:94:3f:ae:d5:54:01:92:
f5:fb:e9:52:1a:9e:87:01:d0:53:3c:8c:22:7f:8f:7c:0a:7d:
82:4c:03:f2:3d:bb:b5:1a:df:a6:dc:a3:3d:aa:9d:5e:26:00:
95:fd:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:14 2025 by rpki-client