Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier: RMMb2G1rxsCRqCo+fs9qcPPiedMTDXtJttxi1T2cYL0=
Subject key identifier: 27:2D:13:8A:75:D2:8D:F4:70:6A:8D:D4:FA:89:24:DF:D2:08:63:F8
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 01987BD23697FA21DBE43D0F51D2764D4428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number: 0289
Signing time: Tue 05 Aug 2025 20:00:30 +0000
Manifest this update: Tue 05 Aug 2025 20:00:30 +0000
Manifest next update: Wed 06 Aug 2025 20:00:30 +0000
Files and hashes: 1: BuJq75MR8DCU5hnHyoHSIDgc_Go.roa (hash: WYFNii4ePD8MQfSQILNRQNPBQSQiOXOjnZErIQSWojg=)
2: XwqfYEtRGpVmtxULo8IDWcyQXIY.roa (hash: Qx5i/G9uqQlJ2PX+MsevYGq69DXaRpp3PFojSyjEu/0=)
3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: FzwaIH7R+qGIRHFbzsvKOtRZD7fqBLjxgOjUze/HA/o=)
4: kuduuaUOyGakCO9Tn5rzfY0i8Hk.roa (hash: Q9PoN1sRWuaTY4KshxWn50PXqDpvKrsvU7VleCWrxSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:36:97:fa:21:db:e4:3d:0f:51:d2:76:4d:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: Aug 5 20:00:30 2025 GMT
Not After : Aug 6 20:00:30 2025 GMT
Subject: CN=272d138a75d28df4706a8dd4fa8924dfd20863f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:ef:59:8f:af:08:b7:57:3a:90:df:f4:d7:
73:b5:43:dc:83:94:1b:16:76:af:9a:6c:a9:fa:b7:
c3:0d:68:40:75:9f:9f:a3:dd:be:e2:fc:94:d6:3d:
ee:b0:11:6b:8a:aa:98:9b:d5:31:5a:30:c0:4c:50:
8e:f7:72:0b:ce:d1:e6:36:90:62:eb:ec:8d:6c:21:
21:f3:b1:c2:d6:5a:76:6e:1b:63:fa:41:2b:5d:f8:
97:fd:69:73:35:f5:c7:f8:f4:05:b0:ac:9a:63:df:
a4:86:5c:9f:da:55:ef:93:e0:35:a4:e5:30:61:f4:
db:6e:ca:e3:bc:6e:d4:54:65:92:00:74:8a:18:ac:
17:05:24:8f:fc:32:eb:e8:3c:b0:05:26:c2:af:1e:
9c:51:a8:56:b2:33:09:87:10:dd:64:9a:61:4d:4c:
0a:03:a5:9d:f3:95:17:84:6e:14:99:ae:22:38:87:
e5:1e:c8:65:a2:4f:2b:6b:f4:e4:65:8f:86:d9:2c:
66:f1:03:18:c3:ca:81:dd:9d:01:0e:4c:46:30:14:
56:8d:17:37:92:e9:5e:71:75:02:2f:5d:74:c8:4e:
ce:59:51:af:0a:25:30:3b:c6:96:cb:2d:7a:dd:a9:
f7:b2:2c:84:8d:65:c4:6b:f6:2a:aa:23:55:7b:63:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2D:13:8A:75:D2:8D:F4:70:6A:8D:D4:FA:89:24:DF:D2:08:63:F8
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:a2:3c:fa:d3:3c:0a:91:74:71:3d:39:5a:ee:04:0b:df:
68:71:8b:91:23:55:2a:9e:5a:af:ec:61:a5:e5:59:13:f2:60:
be:d1:8b:13:98:ec:25:bf:19:2b:ca:29:a5:0a:cb:b4:46:31:
3b:d9:41:60:14:69:e4:c6:69:79:bc:ec:c6:2d:ec:3e:0b:3d:
7f:b7:77:13:ed:54:e5:57:ca:1a:bd:56:93:d1:ed:fc:47:da:
cd:b8:33:ff:6a:c7:0f:1b:d1:43:fc:32:36:e5:08:c8:49:26:
40:31:60:92:fb:f7:d5:a9:9f:65:c5:3a:32:6f:a1:6b:9a:c6:
2c:3e:a3:b3:d2:6f:f9:6b:c0:5e:7d:ea:dd:f0:98:ff:9a:9e:
e1:e1:59:c0:56:c1:3b:5c:6c:98:5b:4e:25:4d:57:27:a2:ca:
4f:91:ef:b1:eb:24:19:90:ba:bb:26:e9:51:16:92:99:1c:03:
b0:87:de:a2:77:d2:c8:78:ab:38:05:54:04:d7:5e:ed:58:1a:
14:9a:9e:9d:be:57:4c:c0:f5:b2:26:42:ff:10:0b:0f:4a:49:
23:f1:1e:7c:e2:f1:d6:43:f8:82:89:6f:69:9c:82:5e:26:01:
9a:e1:86:94:c7:35:28:bf:0d:c0:e4:ed:72:17:58:51:fc:8c:
cd:c0:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:56:56 2025 by rpki-client