Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: kXMFmhHDsq+8tfIZZHEGAKfDLV0XlZLdhb2LD09t6Mo=
Subject key identifier: 87:8A:89:C1:84:77:69:93:37:2D:86:03:FB:57:35:2F:D2:32:44:25
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 0198499C7336598C11E9D5FF1A0E0D0EC718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 02E5
Signing time: Sun 27 Jul 2025 02:00:46 +0000
Manifest this update: Sun 27 Jul 2025 02:00:46 +0000
Manifest next update: Mon 28 Jul 2025 02:00:46 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: LlHL4r+DVN+bo5LZmevylqPcj4VEoLFLqKw2HS9POzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:73:36:59:8c:11:e9:d5:ff:1a:0e:0d:0e:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Jul 27 02:00:46 2025 GMT
Not After : Jul 28 02:00:46 2025 GMT
Subject: CN=878a89c184776993372d8603fb57352fd2324425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:fc:4b:ab:0e:15:e5:e8:e3:9d:dd:6e:92:
36:da:8b:99:a8:11:82:57:96:cd:39:a8:4c:ba:0a:
28:ee:d4:d4:f3:09:a4:37:1e:7a:c8:e3:93:42:af:
db:d9:e1:b5:63:80:ee:92:3e:5e:f3:73:45:89:28:
60:79:c0:6e:00:91:d8:95:b9:c2:80:5f:9f:5a:f7:
59:ee:04:10:37:c2:71:a9:58:5e:8a:15:6b:fa:b3:
da:1a:f5:1f:3e:80:ea:5b:b4:c9:16:c8:fe:34:7b:
2a:5b:14:42:2e:14:fa:8b:35:82:fb:5c:76:e6:b3:
c7:04:d6:6a:1f:3d:39:32:24:19:c2:ed:42:d5:9e:
b2:f0:aa:4b:1e:6e:ab:e6:96:ae:97:6a:9e:33:7b:
d7:de:c1:3f:0f:6f:1a:44:07:f2:53:cc:e8:e5:91:
49:37:9b:be:fb:90:31:08:38:5e:bf:09:bb:1a:7c:
22:98:b8:80:c2:c8:6e:45:02:f7:9f:59:ea:de:76:
e7:58:7c:8d:e4:cc:07:cc:05:e3:e7:6c:d6:13:b7:
48:67:a3:f2:36:b8:56:03:f8:9b:1b:45:2e:c0:85:
86:c0:f3:04:2b:07:75:81:20:d6:22:2f:09:7f:aa:
66:fd:3b:f0:30:23:2e:2d:e7:2a:0e:d5:ca:41:57:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:89:C1:84:77:69:93:37:2D:86:03:FB:57:35:2F:D2:32:44:25
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:c2:5d:3a:14:2a:da:3a:b7:ec:76:f2:20:fb:2a:34:b0:
c0:df:a4:75:92:09:f7:3f:9c:11:84:86:0e:b2:26:2e:5f:48:
88:a9:fb:b1:6c:6c:68:b9:4a:e4:e5:d8:01:7b:bf:77:75:a1:
24:f5:3c:db:75:7e:74:f7:c7:a4:d9:0c:d5:13:ba:85:f6:98:
ed:fd:5b:f9:92:e4:0b:00:35:ff:57:73:60:e7:5c:2b:62:75:
f2:6c:9c:b8:9b:da:dc:47:cf:c9:ae:4b:eb:9b:ce:c2:89:08:
1d:67:0c:7a:b2:42:06:c4:d1:2b:dd:a7:e8:d8:bf:ba:62:e0:
0b:73:05:20:8b:ac:43:d6:47:56:44:93:27:66:d9:b0:cf:c8:
d2:d7:9b:90:3e:e2:c1:e6:1d:d4:0a:1b:06:47:29:02:5a:4e:
83:cb:cc:7d:11:a0:a6:73:0e:59:69:7e:0c:7c:91:5f:78:b0:
17:73:28:18:02:48:79:7e:e4:4b:18:38:2a:bc:fe:d2:57:91:
e8:f4:c3:41:66:32:0e:63:f0:55:99:7b:72:3d:6c:79:77:66:
a9:df:1e:de:b1:7c:6c:96:b0:6e:24:b8:c5:e7:32:ee:86:79:
89:e1:45:6d:36:52:00:2f:59:bf:e1:43:05:98:ce:a2:e3:2d:
72:b8:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:58 2025 by rpki-client