Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: U8h0gYpKWzdfFL+cf25Ldc60MN+zxkVD8QwACvCIA8M=
Subject key identifier: 9F:5A:28:46:A2:D3:C3:6A:6F:66:85:87:05:4A:11:68:53:AF:BA:B9
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0198887B6D06D802B5867C7B6868F145B7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 07:00:46 +0000
Manifest this update: Fri 08 Aug 2025 07:00:46 +0000
Manifest next update: Sat 09 Aug 2025 07:00:46 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: B0A+lcXXRg6b5cimFrgRMmMYXfaMx3Jz6nen+UbvPLk=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:6d:06:d8:02:b5:86:7c:7b:68:68:f1:45:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Aug 8 07:00:46 2025 GMT
Not After : Aug 9 07:00:46 2025 GMT
Subject: CN=9f5a2846a2d3c36a6f668587054a116853afbab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:e7:54:20:0d:fa:70:25:0b:1c:1f:6a:b8:
88:a8:3a:40:cd:be:01:ff:e6:3b:76:ba:2c:d0:ca:
b0:36:ea:d7:73:91:2e:a1:4b:55:2e:09:f0:ff:63:
f0:77:75:7a:83:18:df:e2:b5:d8:bd:35:35:0b:42:
b6:c9:be:ff:cb:c1:ff:c6:af:a3:e2:de:bb:15:3e:
1b:df:ee:6d:9e:e6:00:d3:f8:e6:c1:3d:ea:0a:fe:
f1:25:2c:10:e3:06:b8:e9:ae:35:26:c7:48:cc:9a:
4e:a6:ab:c0:15:cb:ec:19:5e:ca:ab:1f:42:ce:56:
31:f8:21:81:de:72:cf:59:bf:2f:7f:e3:6c:9a:c0:
69:ce:a5:64:bb:6e:f3:64:c4:bf:b7:91:3c:b4:e8:
74:3c:a8:0c:ec:ba:50:10:f3:16:8d:67:ad:38:f7:
5a:6b:e7:f9:42:cb:a7:1a:b9:88:e7:8d:c1:a4:11:
5e:7e:0d:48:db:8b:3d:64:40:09:d2:a6:10:db:93:
8c:12:6f:a9:23:5c:09:d0:bf:57:60:de:90:b4:fb:
11:cf:a4:21:bd:95:f7:57:66:6f:e3:9b:b1:84:21:
e2:24:49:57:4e:bf:d1:c0:27:6d:c8:b7:53:03:f8:
68:2d:f3:26:d5:27:38:94:c0:a4:19:ca:8e:41:80:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:28:46:A2:D3:C3:6A:6F:66:85:87:05:4A:11:68:53:AF:BA:B9
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:2a:f9:2c:40:51:f9:eb:b1:f7:46:92:12:18:19:3b:23:
b7:bc:5c:96:81:c8:4c:5b:cb:b1:54:16:8e:14:e0:d9:4a:fc:
62:bc:bd:99:d9:f9:d2:bd:21:86:d0:5c:0d:e6:0b:d8:0d:a3:
c4:ef:c3:aa:5a:fb:12:5e:d6:af:59:73:65:4b:a7:ab:56:29:
01:a1:23:42:f7:9c:b2:61:31:c0:3e:59:85:2e:89:33:ba:de:
ee:c8:ce:38:17:78:f1:25:e7:a3:86:ec:29:be:ed:06:05:6d:
59:5c:f2:3c:1d:3d:16:53:b7:60:95:19:c5:c3:54:33:6d:54:
22:83:21:5b:7f:50:d1:6d:ff:4f:b1:be:da:bb:1b:f9:3f:4e:
61:21:ca:2d:c4:a5:e1:a2:56:9c:b3:c4:22:22:a1:ed:ad:d7:
db:f5:a3:26:ad:22:f8:bd:d0:b7:88:e4:c1:4f:16:bd:38:05:
93:b5:c2:4d:89:aa:e5:67:9f:72:f8:b7:af:61:aa:70:cc:16:
79:6e:ee:f9:01:c5:90:f8:31:ff:a9:10:9c:62:0e:4d:0e:6c:
9e:e6:aa:84:31:da:c7:f5:29:c2:27:f4:e2:17:90:b4:42:09:
9a:48:21:05:2b:2e:43:5a:5f:ab:6e:e3:b5:46:3e:10:10:74:
05:e3:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:30 2025 by rpki-client