Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: i4/gZa2SM5DojYZ/7uF87HbfZPlMoFNNQCnbJXr0oZM=
Subject key identifier: DA:42:C0:37:46:5A:E3:51:13:9D:63:D4:B0:6F:13:44:94:35:32:46
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019880F8CFD58BCE1DB6D3BB7CAB3C273454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1562
Signing time: Wed 06 Aug 2025 20:00:46 +0000
Manifest this update: Wed 06 Aug 2025 20:00:46 +0000
Manifest next update: Thu 07 Aug 2025 20:00:46 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: wDaV1kZfY7MRqIw3z84lKFyLN9Ie8eoqcHc+ZfM2XSM=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:cf:d5:8b:ce:1d:b6:d3:bb:7c:ab:3c:27:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Aug 6 20:00:46 2025 GMT
Not After : Aug 7 20:00:46 2025 GMT
Subject: CN=da42c037465ae351139d63d4b06f134494353246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:76:5a:31:12:eb:21:e2:8e:45:34:68:9a:
89:e3:1c:7c:dd:dd:94:87:ff:40:ec:43:35:74:30:
45:00:61:c9:72:3a:dd:cc:4c:60:c7:c5:22:d1:87:
de:c9:97:08:87:91:85:58:33:0f:36:81:d7:5d:54:
89:55:d1:d4:c3:1d:fc:a6:08:ec:5e:68:94:25:3e:
f8:61:06:e0:ac:3b:db:8f:1a:b4:d7:8f:9b:b9:7b:
6c:51:0e:8c:85:f4:be:a3:e0:56:95:d5:e6:07:4a:
4f:c5:c0:fe:ff:90:20:db:63:98:84:3f:32:44:5d:
23:e0:5f:45:95:9b:e3:8f:f5:48:28:6c:4a:ef:46:
18:73:02:b1:f6:e7:d6:0a:d4:54:3c:71:bb:0c:22:
d9:d4:23:91:c5:d9:01:fb:6c:47:93:ae:ab:75:49:
55:9c:7b:fd:70:17:bf:aa:db:9e:85:13:f3:27:56:
38:2c:fe:c1:d5:92:ad:96:16:c8:14:12:38:a9:3e:
b5:8d:1c:bb:d6:1d:4a:bf:eb:77:36:63:79:50:a9:
f9:3a:82:37:bc:84:bc:41:d5:1a:90:01:f9:67:22:
04:79:dd:3e:fb:b0:86:26:8f:15:5e:fe:d5:45:9f:
82:13:d2:f5:1c:ed:73:d4:9e:c2:d0:3c:59:d2:0e:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:C0:37:46:5A:E3:51:13:9D:63:D4:B0:6F:13:44:94:35:32:46
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:eb:3a:14:31:cc:ce:b0:f5:fa:ad:e4:23:d7:6f:7b:f9:
34:92:12:35:c9:0f:13:22:1a:11:5a:1d:31:5b:5f:c9:37:76:
24:aa:77:be:13:0e:dc:ed:ab:ba:05:68:17:26:d4:c1:4a:14:
5a:1b:54:0f:bd:09:3c:54:5a:85:62:41:95:20:8b:03:b0:b5:
d3:ed:3e:a6:10:1b:2c:9d:ed:8e:34:f8:b4:dc:95:45:36:17:
0f:8f:e2:0c:1a:6c:15:8f:7c:73:5f:7a:ff:98:52:b3:b5:88:
12:57:27:3c:14:c3:cd:85:e8:7f:1d:24:a6:70:11:f0:19:48:
d7:27:20:69:be:7b:79:70:88:3a:93:3c:e5:06:a4:3b:d3:59:
5c:73:67:1f:25:23:70:ae:70:f8:f5:0d:f9:fa:db:1d:92:4f:
04:a0:d3:0d:be:b1:0e:d1:cd:c9:48:32:9c:dd:4a:6a:c3:31:
42:5d:b9:27:b3:75:15:bf:75:12:65:76:bc:bf:c9:6e:a6:47:
de:83:8f:17:01:e4:7c:ce:1f:0e:84:f1:95:5e:b3:57:18:df:
92:70:fc:2b:36:57:50:0f:00:3a:ac:99:75:42:db:cb:94:3b:
e2:22:2d:26:6e:09:0e:57:a9:ed:b1:d1:87:c7:e5:52:06:c8:
f6:ff:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:56 2025 by rpki-client