Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: N1I59MVg8gtKdXwMS0O0ok1ELO4W0ck/GNw1tpHpC+Q=
Subject key identifier: EC:FD:DC:AE:CF:FA:76:65:50:42:03:C2:78:72:23:AA:B2:A4:93:B7
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0198733D510592E643A9749287588B98106F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0CEB
Signing time: Mon 04 Aug 2025 04:00:54 +0000
Manifest this update: Mon 04 Aug 2025 04:00:54 +0000
Manifest next update: Tue 05 Aug 2025 04:00:54 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: b04508zqUShZxeWLEP7R3mHtyu1T7pmi0OuVhm/fanw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:51:05:92:e6:43:a9:74:92:87:58:8b:98:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Aug 4 04:00:54 2025 GMT
Not After : Aug 5 04:00:54 2025 GMT
Subject: CN=ecfddcaecffa7665504203c2787223aab2a493b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:c4:9e:cf:95:11:c3:af:40:dd:59:78:3d:
f9:35:80:87:36:77:e2:bd:5f:b8:35:1c:c1:5f:90:
ae:f3:ec:de:da:5c:6c:76:60:92:53:44:d0:d1:31:
db:04:9f:3d:a8:da:e6:74:3e:6a:c0:72:51:98:74:
d2:3e:82:f8:a2:ca:9b:a8:11:09:b0:c9:fe:2d:e6:
c2:1b:b9:f7:05:e8:71:84:d4:e1:1f:ac:4e:b7:cc:
87:1b:f6:d1:d0:6e:9d:a7:a3:7c:99:6e:51:42:bf:
8a:fc:ed:f1:b5:36:3d:9a:47:87:d7:dc:af:36:c9:
b9:9f:91:16:7f:f4:4c:6d:53:91:73:53:7c:b2:fb:
d6:d9:f6:36:1e:56:4e:e7:e0:23:18:c4:03:f6:54:
b5:be:70:ed:42:bb:9f:f1:72:3b:82:e3:db:bc:b3:
56:ae:4c:d1:bb:d0:0f:57:7d:45:fa:74:02:2a:e0:
e9:63:4d:21:57:7c:34:d2:6b:38:33:a7:be:9c:e5:
fa:4e:26:13:86:83:96:a4:6f:d7:9c:b7:5f:19:d4:
7d:dc:73:33:cc:74:5e:e9:cc:ae:52:be:07:5d:61:
72:7a:36:57:ff:64:ef:30:d8:7a:56:a0:38:f4:fa:
10:1d:6b:ec:ed:0c:37:92:6a:6a:8d:2d:40:e9:70:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:DC:AE:CF:FA:76:65:50:42:03:C2:78:72:23:AA:B2:A4:93:B7
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:58:70:4a:0e:92:9c:ff:c8:08:92:5f:98:9e:68:75:0e:
45:76:b1:50:ed:7c:c3:7c:6e:f9:6b:07:c4:b5:8f:b9:0b:76:
1a:90:82:9d:47:fd:3b:4c:49:1c:48:43:32:91:cd:bd:c1:52:
de:7b:6b:3f:60:dd:f5:ef:f7:99:29:5d:8c:f9:eb:51:62:bc:
8f:b4:43:cb:de:8f:41:c6:0b:9a:d5:37:65:fb:31:f5:f2:a7:
55:82:72:11:2d:f7:18:f0:e3:1f:f2:15:6b:cd:89:96:05:4d:
be:a5:7a:b5:79:9d:d8:d8:17:b7:c3:a9:60:a8:61:6e:f0:0f:
1d:54:3f:78:73:a1:6d:70:4e:0f:59:64:50:92:a7:63:0c:42:
76:83:ad:81:56:78:b6:e0:f9:41:65:eb:e6:9a:42:fb:17:3f:
dc:59:80:0d:e1:39:cb:15:3e:6c:d5:eb:27:53:3a:98:a8:34:
98:3f:6d:76:0a:b5:4c:86:1c:b6:a0:1f:c8:ed:94:ad:2a:28:
12:d1:8b:43:38:c1:6e:70:58:e2:82:7b:51:76:69:dd:0b:c4:
c8:ca:ef:e1:2d:a8:49:1b:01:7d:79:fb:a5:d4:6a:95:1f:65:
6e:e2:95:5d:82:8e:1b:b6:95:5f:9c:8d:27:2a:71:2c:25:43:
57:02:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:57:52 2025 by rpki-client