Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: eF1t+ieFKgYQ6qz/ev6zv56wwJHnVa1BUMlD9gjBCsQ=
Subject key identifier: FF:30:1D:39:D7:08:D0:62:56:CD:B3:F1:3A:37:22:C5:26:60:AE:92
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 019874192A1163835BAAE87E2198D94F9ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 01A1
Signing time: Mon 04 Aug 2025 08:01:02 +0000
Manifest this update: Mon 04 Aug 2025 08:01:02 +0000
Manifest next update: Tue 05 Aug 2025 08:01:02 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: Hy12gXNA3knO07FXRokn2Hg/CE0xUqGtK1E17/+H838=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:2a:11:63:83:5b:aa:e8:7e:21:98:d9:4f:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Aug 4 08:01:02 2025 GMT
Not After : Aug 5 08:01:02 2025 GMT
Subject: CN=ff301d39d708d06256cdb3f13a3722c52660ae92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:c3:6c:0d:b5:06:94:5b:c0:84:7a:bd:50:
82:8f:37:86:9c:cc:80:0d:2c:75:09:f6:b0:df:1a:
5b:b6:be:c6:ba:47:f0:65:5e:2f:7b:65:52:f2:a4:
86:0a:00:85:ad:0e:43:e9:96:ca:9f:17:f3:9c:e4:
28:90:1a:ea:ba:51:c3:3e:45:11:b4:49:dc:8d:d9:
2c:12:54:2c:3e:07:2f:15:e7:dc:59:16:c9:aa:6c:
d2:da:61:df:58:1c:bd:c8:86:c1:65:0e:1c:46:0e:
66:30:f2:c2:67:46:fa:3c:58:c3:da:8e:b1:d9:76:
05:3f:9c:c0:82:a4:16:54:2a:c2:13:cc:09:d4:de:
13:ed:a3:75:85:ae:f3:01:e7:be:09:30:9e:cf:4c:
71:0d:a1:17:07:6b:cc:3a:a7:65:37:7f:da:44:cf:
17:a2:99:87:ec:6a:65:18:02:9b:f3:4c:f1:89:dd:
1d:99:03:36:c4:6e:ac:79:ed:4a:87:a9:a7:a6:73:
d2:23:83:af:9a:7a:6c:e7:5b:ce:e1:ea:12:61:80:
76:01:6b:b7:86:8f:de:eb:fa:0d:2d:1b:bc:1b:ed:
a9:5b:34:77:c8:40:e3:54:8c:32:9f:bf:36:9e:93:
2f:d5:d9:18:fa:0e:9c:fc:b2:7c:6b:94:89:38:ed:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:1D:39:D7:08:D0:62:56:CD:B3:F1:3A:37:22:C5:26:60:AE:92
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:92:bd:c7:96:23:4e:68:e8:6c:ee:75:13:ae:33:05:0b:41:
99:ba:6c:0a:21:49:d1:1e:18:8f:8c:ce:f7:92:01:be:fc:53:
98:c8:83:b9:1f:0b:5c:45:b8:49:36:28:32:37:15:4c:6f:38:
07:29:3f:84:6f:88:ef:85:1e:21:26:12:f1:6e:36:53:96:e4:
34:e2:ca:52:ee:81:92:e9:a8:09:50:2e:cb:fe:66:e2:d3:23:
21:16:0e:38:38:4b:33:b6:02:96:30:67:f6:8b:89:a2:c4:ee:
f8:53:29:1b:67:de:36:61:61:3e:0e:60:4c:de:bc:2e:c6:d8:
c0:3b:d1:88:3f:19:6f:30:c6:5a:81:7a:84:52:50:e0:71:a7:
e8:a9:c2:63:4b:b5:84:34:80:f3:b6:f9:22:33:fb:9b:d4:85:
00:02:3c:e3:3a:c8:6e:53:2a:27:30:53:43:f2:27:e4:1b:7b:
a1:4d:bb:bc:2c:ea:5f:56:33:58:b5:ac:80:0e:1b:45:f1:07:
87:48:8b:aa:75:69:0e:b3:29:7e:ac:8d:13:6d:f6:d7:4b:d8:
02:d1:93:12:6a:09:7e:ce:08:eb:0b:51:d5:a7:e6:ff:14:ca:
1c:98:39:f7:ec:8d:82:87:82:26:92:d2:eb:91:6e:c1:3c:bc:
c3:8f:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:59 2025 by rpki-client