Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: Vt/b4fy7vyzEJAht5Ko969DCY+zsag51tDcCEA68JPU=
Subject key identifier: BC:02:8B:13:DC:B0:C6:83:8F:EA:D4:F8:14:C4:CC:2F:A4:DC:78:A2
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 01988D6B27233B750C8A7C580E455DE300A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 133B
Signing time: Sat 09 Aug 2025 06:01:06 +0000
Manifest this update: Sat 09 Aug 2025 06:01:06 +0000
Manifest next update: Sun 10 Aug 2025 06:01:06 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: 1Dtbt0bdy8VexTf8LVQP/PRkPPYlElP+2BPrTiOvvfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:27:23:3b:75:0c:8a:7c:58:0e:45:5d:e3:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Aug 9 06:01:06 2025 GMT
Not After : Aug 10 06:01:06 2025 GMT
Subject: CN=bc028b13dcb0c6838fead4f814c4cc2fa4dc78a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:1a:a1:3f:a2:2b:32:49:5e:39:55:5a:2b:
56:14:0a:0c:90:c4:b4:6b:00:f5:b5:b7:d5:05:2d:
eb:1d:db:de:88:c9:74:46:95:1e:09:dd:8f:8e:70:
60:59:e2:7f:39:3b:7f:0a:f6:c0:3c:50:b2:6d:47:
99:36:21:f1:52:2c:d8:3d:32:70:c1:48:ea:9f:49:
f4:b1:40:ec:a8:24:75:ea:a4:57:f0:97:97:95:ce:
d2:60:b6:81:7b:0b:b5:4b:44:ca:0a:00:33:92:2f:
5c:ce:d4:c6:28:ea:be:08:85:66:da:1f:74:ea:44:
15:91:6c:cb:28:99:67:2f:60:b0:32:20:58:96:00:
36:78:27:e2:7c:25:e5:49:69:6f:18:d7:cb:a8:dd:
81:f7:22:5d:ff:e7:68:a4:de:58:62:36:e7:ea:d1:
b9:08:17:6e:21:9c:82:a2:cf:5e:3d:4d:3b:79:44:
7a:cc:e4:e3:61:39:fe:62:09:c8:c5:e1:69:3c:9c:
ac:18:57:6c:bc:12:73:63:fa:31:6b:66:43:24:dd:
74:3a:5f:7d:b1:70:d8:1c:70:23:26:b3:44:83:6d:
da:7a:18:9e:c7:d5:92:4d:ae:df:9d:35:f0:dc:1e:
87:e3:9d:f0:90:64:53:bc:f8:75:a4:5b:16:32:ea:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:8B:13:DC:B0:C6:83:8F:EA:D4:F8:14:C4:CC:2F:A4:DC:78:A2
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:a8:26:25:b4:69:b0:a1:11:65:ab:98:e7:d1:8f:3c:93:
fe:e9:e4:d4:57:26:88:4c:42:f2:47:c5:8e:73:a4:3f:bd:fa:
15:1c:02:5f:d8:6e:26:e1:f4:14:f0:e9:9c:22:94:32:30:60:
07:05:cc:a6:17:3f:46:6c:98:c4:0e:8f:bd:85:df:f4:2f:b5:
6a:9a:4e:e0:ff:c4:fb:5a:9f:98:43:2e:86:8b:8b:69:ee:fa:
41:c5:37:d5:21:f9:b4:6f:1d:a2:1e:ba:05:96:ca:61:9b:43:
99:80:d0:e8:27:18:7d:bc:7f:66:b6:dc:eb:50:fe:f1:1c:7f:
b8:1f:a7:67:54:58:3c:1f:79:a6:4a:51:fc:5c:81:94:4a:0d:
01:f2:d9:da:a5:8a:63:49:7b:f1:ed:2d:05:92:d6:de:3f:ea:
32:07:a6:b8:0f:3b:f6:e0:73:a6:8c:cc:ce:1e:56:80:cc:77:
60:c4:95:9a:a6:00:ec:7c:ee:8f:28:ab:0c:2b:45:8a:dc:7c:
18:1f:8f:30:fa:ee:8e:87:e5:74:89:8f:c1:5b:a8:9d:db:00:
97:6d:d1:b3:48:77:6a:71:31:b7:9e:9d:bd:31:2b:31:ea:de:
b2:c0:64:de:fc:a1:03:ae:05:90:bc:ec:eb:eb:44:9f:82:47:
bf:b5:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:45:04 2025 by rpki-client