Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: 9v0Z/QhpjwvmrxhGI2DA7PLN6dqC6DRrIwxZy5ttBWc=
Subject key identifier: 56:1F:E3:46:22:CA:55:6E:44:26:D2:64:75:19:9A:90:D5:C0:FA:15
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 01987C773E5F44D024A4B5B7ED2EB029A942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 01B3
Signing time: Tue 05 Aug 2025 23:00:46 +0000
Manifest this update: Tue 05 Aug 2025 23:00:46 +0000
Manifest next update: Wed 06 Aug 2025 23:00:46 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 96mR/Dv6jnUdxD5tKoBctIgqhRGUeK+HePikC6e1W4o=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:3e:5f:44:d0:24:a4:b5:b7:ed:2e:b0:29:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Aug 5 23:00:46 2025 GMT
Not After : Aug 6 23:00:46 2025 GMT
Subject: CN=561fe34622ca556e4426d26475199a90d5c0fa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:76:02:82:04:35:76:06:e8:79:59:e3:b1:
37:db:b4:ff:5d:21:fc:c5:ed:34:15:a8:2f:62:ae:
98:19:a7:aa:79:e8:66:8a:b7:6f:5d:46:93:3d:62:
aa:8b:bc:54:0f:fa:37:6c:1d:79:23:66:b2:56:fc:
a9:c4:ff:95:66:ff:63:92:d9:51:9a:cd:a4:a3:96:
6b:b8:a9:f5:27:de:58:c3:cc:85:40:32:ba:fc:b5:
28:3f:d9:36:32:ef:0b:e1:aa:d6:57:47:5e:01:73:
c5:10:76:fa:5d:62:21:d5:25:00:69:87:3e:be:78:
b6:7d:e6:98:2b:8b:14:2d:57:d4:f1:f5:11:7e:ec:
72:ef:94:cd:f8:48:06:1c:c8:56:04:fa:4f:67:ed:
a1:00:e3:7e:5f:10:a0:07:fe:7f:db:7c:45:38:6e:
3d:81:ae:67:da:25:58:e1:77:b7:8a:2e:8c:d1:f3:
dd:dd:16:a5:b2:a6:9b:95:6b:98:ec:f0:7f:ca:f0:
a2:0b:9d:e1:4a:43:e9:af:58:99:0e:ae:6f:b7:b1:
bb:97:6b:e7:99:50:b5:08:ff:e1:bf:d4:f5:5d:12:
d8:51:23:a9:74:cc:ca:29:b1:ac:e6:31:6c:4e:34:
12:d1:76:cd:1e:51:94:b0:e5:b5:3e:02:8f:83:22:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:E3:46:22:CA:55:6E:44:26:D2:64:75:19:9A:90:D5:C0:FA:15
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bc:65:af:fa:02:86:6a:db:18:ff:5f:d1:c1:25:ee:dd:5b:
5e:23:53:f5:ba:dd:31:51:63:8b:fd:75:61:21:1e:9a:d9:f2:
cd:98:06:33:65:45:2a:6c:9f:e7:7c:be:b0:17:39:14:1e:88:
99:d9:dc:f8:e4:ff:76:b0:b4:ca:19:40:18:2b:68:39:e9:5a:
04:f0:88:84:7d:20:df:29:e2:3c:55:bb:e9:4d:19:48:b3:44:
fa:c9:27:ee:5d:be:ad:32:8c:6e:84:ff:5b:30:b1:4d:be:b0:
ca:13:9e:55:82:0f:d9:2a:62:ab:1e:36:0e:52:58:de:88:1d:
a1:19:22:d1:c9:fa:17:f4:3a:ba:3c:fe:29:a6:d6:41:b1:74:
0f:81:96:59:83:08:a0:f5:ab:b2:1c:a2:88:89:08:77:00:ca:
b3:0b:03:2b:f9:85:4b:c5:28:48:40:45:7e:df:e9:b7:f7:c4:
5b:76:03:40:58:1a:eb:af:2d:32:9d:2e:ce:b6:ee:fe:0f:e6:
eb:25:21:d3:44:e1:32:56:7a:28:33:04:1f:50:7d:64:a1:e9:
0b:85:3a:69:60:be:7f:dd:8a:49:9f:c6:20:53:b0:5c:eb:86:
cf:c9:d4:47:3a:02:ae:bb:e7:35:c0:36:66:e3:19:e7:3f:2d:
de:1b:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:30 2025 by rpki-client