Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: nxY5bm3m3CoQaiGwQIPV5PtRQbCiMs32PpSGdRWp11Y=
Subject key identifier: 9A:07:52:FD:1D:C3:43:23:29:DC:27:A3:40:53:CE:47:2D:09:04:B3
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01984C663C1F60079A0FBD615C736AA8582E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1184
Signing time: Sun 27 Jul 2025 15:00:25 +0000
Manifest this update: Sun 27 Jul 2025 15:00:25 +0000
Manifest next update: Mon 28 Jul 2025 15:00:25 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: YHPOUjHsoTDAPpkfelrALsYj980myQdAnbrtg0e5wNo=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:3c:1f:60:07:9a:0f:bd:61:5c:73:6a:a8:58:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jul 27 15:00:25 2025 GMT
Not After : Jul 28 15:00:25 2025 GMT
Subject: CN=9a0752fd1dc3432329dc27a34053ce472d0904b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:e0:5a:ea:af:86:b0:70:15:d7:fb:49:c7:
d0:36:48:f7:80:d0:aa:20:73:7e:27:f7:b2:be:fe:
18:fb:13:76:b8:cc:0a:0b:04:dc:d8:59:75:8f:fe:
e7:ef:7b:b6:68:4f:00:7c:24:9f:b3:a3:0b:57:e8:
c5:3e:64:9c:8a:cd:4d:9f:65:d7:32:b8:19:ca:a1:
ba:07:00:5b:96:a7:ab:77:7f:22:ff:0e:06:9c:19:
d1:8a:6b:72:d5:e7:03:18:c6:98:dc:6c:9b:ff:00:
28:89:c3:94:f9:22:2d:e6:09:d3:55:ff:42:46:43:
0d:13:a8:5e:24:17:a1:1d:37:9c:35:1a:ef:b4:d5:
ee:88:4f:e7:cd:d1:f7:36:e1:a4:0b:54:00:b6:27:
54:97:e7:47:97:16:4d:fc:f5:71:2a:7d:f2:7f:e0:
b5:8e:a1:e9:aa:65:2d:74:21:54:5d:91:e8:ec:c7:
f5:5a:4f:68:a3:04:21:03:7e:98:67:7c:90:31:49:
ca:05:ad:d6:c3:87:af:d5:f6:7e:11:2e:7b:7c:ef:
c5:3f:08:66:4c:d2:01:cd:09:9b:a1:ec:be:57:6e:
ea:ae:78:48:24:12:56:0f:f6:57:72:71:0d:8e:61:
79:8a:a9:e5:18:c2:10:2f:73:ca:46:42:7f:46:0f:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:52:FD:1D:C3:43:23:29:DC:27:A3:40:53:CE:47:2D:09:04:B3
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:f6:cf:b8:bf:cb:c0:bc:d7:44:9c:ea:7c:26:66:96:d6:
3a:97:73:3f:21:ca:4a:b6:2d:7e:33:78:40:90:17:19:7b:be:
2d:07:4d:47:ca:02:16:2c:b4:fd:0c:88:0c:b5:18:84:f5:c5:
a9:e2:f0:17:6c:1a:87:06:ae:a5:2d:3a:91:9d:13:31:8a:fc:
e7:99:25:f7:2f:3f:5e:4a:7b:cf:63:8c:8d:2c:3a:f0:09:bf:
cd:e2:d4:01:54:52:b1:c3:ed:24:40:3f:03:3a:ad:be:3a:cc:
8f:6c:18:b7:22:8b:15:63:b3:9e:ce:43:26:b4:00:a6:ce:db:
5e:b6:8a:ac:80:6e:26:8e:45:4b:29:70:81:85:b9:b8:9d:ce:
98:40:62:3f:d6:7f:74:2e:aa:28:fd:fe:fb:fe:8f:38:33:aa:
c3:2c:b0:ed:1b:d9:a2:a9:a2:5d:03:b7:be:46:ee:13:7c:95:
eb:05:2e:5d:b7:a5:91:1f:4a:0d:9b:4c:11:c2:88:08:56:f7:
37:43:ff:d1:f3:61:79:97:ab:89:50:b5:5c:b8:07:1d:0b:92:
be:fe:bf:71:ca:da:53:c5:d4:19:e1:f4:0c:d7:ba:df:63:f1:
ac:54:13:a6:eb:a7:61:7c:ad:d9:71:b7:f9:e6:50:4a:e2:d9:
cd:34:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:58:02 2025 by rpki-client