Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: AcDIH6N8r5/hEjOBZUcxDh3bKjUUXWbn8nN/WkRAG6Y=
Subject key identifier: 37:79:D9:C9:1B:CA:C5:4B:70:65:AC:E1:0E:E4:96:3D:7E:0B:93:88
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 0198963756AD7DA04CC77636E4E3A2C366B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 23:01:05 +0000
Manifest this update: Sun 10 Aug 2025 23:01:05 +0000
Manifest next update: Mon 11 Aug 2025 23:01:05 +0000
Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: GE4Be3Vj91VY+bzZWN0z84os6YVBk5S0arx1KC8qseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:56:ad:7d:a0:4c:c7:76:36:e4:e3:a2:c3:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Aug 10 23:01:05 2025 GMT
Not After : Aug 11 23:01:05 2025 GMT
Subject: CN=3779d9c91bcac54b7065ace10ee4963d7e0b9388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:05:82:6c:ba:1a:62:7f:dd:2d:63:7c:96:
dd:43:86:c7:fb:bc:8a:8a:82:a4:6b:b6:0d:3f:cf:
67:08:8a:ce:d6:07:74:d5:17:fb:0e:22:0e:c3:84:
13:5b:b7:59:66:f2:5e:b6:6d:3d:37:b2:db:2b:82:
55:42:fd:08:cc:21:57:76:4c:17:01:b6:4b:cc:ab:
4f:06:05:ce:3d:73:90:5c:07:a7:3d:e4:e5:ff:63:
6f:72:46:be:9c:65:b6:31:0b:de:f5:c7:27:bf:1b:
53:cf:95:ba:9f:83:5d:96:01:d4:1f:06:38:f5:36:
34:1d:46:f2:aa:31:d8:45:c9:0e:0e:de:95:93:9a:
e9:a1:86:2e:de:82:48:91:c5:eb:46:8f:e6:78:b0:
4e:78:96:ac:4b:64:a4:ab:e7:00:54:f2:dd:5b:13:
0a:c5:01:e5:ab:42:74:fd:92:12:5a:cf:f1:9d:fd:
7b:5b:0e:d1:13:ca:bf:e9:91:c5:73:c6:15:42:0d:
c7:97:34:6e:0d:8d:d4:c1:ed:19:da:c0:49:75:b2:
0b:6f:5b:da:f5:27:a2:1d:55:61:4e:4c:23:3d:0a:
17:1c:53:fb:dc:ed:9a:9e:75:71:98:9c:48:d2:d3:
f4:3f:5d:3c:f4:68:9f:aa:b2:48:cf:d5:74:e4:ac:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:D9:C9:1B:CA:C5:4B:70:65:AC:E1:0E:E4:96:3D:7E:0B:93:88
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:98:6f:07:de:a2:11:42:2d:54:d5:43:49:e8:66:d9:53:
00:02:b3:f7:ce:ee:ab:e1:bd:03:27:5e:f9:dd:3f:52:24:ea:
2a:16:75:a7:0b:9f:6b:9e:ad:49:23:21:82:58:1c:af:7a:e0:
ea:77:2e:f7:58:cd:95:e7:b6:43:a7:58:d0:7a:bc:31:8d:f1:
c9:e7:d5:7e:49:96:51:63:82:a4:a0:21:3d:2d:d0:cf:79:88:
0d:da:97:13:4d:84:9b:cd:4c:dc:79:6f:98:5a:94:1b:eb:25:
8b:57:30:dd:0a:df:4c:d8:79:0f:9a:03:cf:32:b4:67:b7:86:
44:10:94:7a:d5:b2:61:d0:7d:bd:4f:e2:50:b6:ab:10:92:28:
04:ef:11:5e:70:f1:89:7a:22:54:60:55:fa:ad:c2:8b:80:77:
78:52:cb:bc:46:cf:7b:82:e3:e7:34:8d:8c:91:ef:de:d4:8a:
71:ee:c8:ff:0a:49:37:c2:90:20:eb:d1:e5:90:81:d8:fd:c8:
40:2a:d2:11:35:a7:c2:f0:3a:eb:59:49:04:4d:46:f5:3e:04:
a6:3e:a7:64:d2:fd:29:c0:6a:0e:99:62:7f:8d:cf:3d:5c:1e:
32:41:19:ec:a7:c8:d9:aa:98:09:63:6d:4e:bf:86:80:76:3a:
5a:9e:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:10 2025 by rpki-client