Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: Un22MCxOV3OYEGd+S+/66GQCrKz+2vHGiboKcUhtwFQ=
Subject key identifier: A2:80:5A:3B:E6:77:3D:AB:C8:1F:7C:5B:45:BD:F1:D0:10:04:25:BB
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 01984BF87BE53A9FE8D877A09958758B007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0C2E
Signing time: Sun 27 Jul 2025 13:00:32 +0000
Manifest this update: Sun 27 Jul 2025 13:00:32 +0000
Manifest next update: Mon 28 Jul 2025 13:00:32 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: dJ2aCNnkEfhzPLzdaD+ZQ6S2HbpgbCTMl9PwQKfN6Q4=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:7b:e5:3a:9f:e8:d8:77:a0:99:58:75:8b:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jul 27 13:00:32 2025 GMT
Not After : Jul 28 13:00:32 2025 GMT
Subject: CN=a2805a3be6773dabc81f7c5b45bdf1d0100425bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:05:55:10:67:b4:4a:1b:ae:b9:de:c5:50:
08:86:1e:47:7b:a3:ce:8f:b8:f8:2c:93:3a:a9:f8:
ad:46:9e:83:e6:c0:80:69:72:60:7c:75:5a:84:2c:
1d:e8:ce:11:42:00:83:f4:bb:2c:4a:4f:d7:b6:0f:
a2:45:e2:b8:fd:3e:a4:05:75:1e:31:5b:60:e2:28:
ca:29:16:81:a0:d2:fa:4d:cc:d3:f0:eb:46:7a:37:
a2:93:24:19:93:21:e4:62:01:c3:18:31:e6:65:dc:
c0:1a:b6:44:f0:b7:43:25:02:fa:d8:f9:a0:52:9d:
c9:04:82:73:d4:6e:28:4b:ab:25:ae:ed:6b:d9:6e:
19:a7:f8:76:cd:3c:17:32:9f:a0:ad:5b:72:19:43:
e9:c1:c2:54:35:c8:10:67:fb:0e:36:8b:f2:0f:df:
26:b0:12:e1:5d:59:ce:cb:2b:fe:e2:f0:cc:c5:2d:
ff:5d:9f:52:d4:b6:10:c1:77:63:9b:70:5e:42:e5:
83:3f:8a:1f:bc:fb:45:09:a7:d7:11:1d:92:3e:33:
7f:18:cc:32:1f:53:60:1b:7b:f1:16:d2:6e:d1:ef:
0d:57:c3:9f:2e:d9:ed:a3:1c:9d:30:47:3c:02:f2:
5a:e5:a8:79:be:33:fd:04:21:31:c5:4a:5f:cf:da:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:5A:3B:E6:77:3D:AB:C8:1F:7C:5B:45:BD:F1:D0:10:04:25:BB
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:52:3a:06:f2:52:10:4a:bc:4e:5e:95:d3:e7:53:e6:18:87:
dd:17:4f:3b:3a:9f:b2:1a:3c:89:44:5d:b6:ee:a8:cd:69:35:
ad:f5:7f:28:c9:9e:d2:92:04:a5:33:89:19:22:7d:59:22:4e:
02:b1:41:f5:b0:6d:15:b4:fa:27:2c:58:f7:0c:85:80:56:23:
86:38:f9:5f:72:2c:b0:2c:5c:25:2d:11:41:11:83:d8:51:a1:
bf:d9:43:1b:d4:13:f0:f4:e7:31:2b:96:89:a2:19:6e:3d:a5:
ad:b9:1e:78:e9:01:36:43:65:90:ae:21:ae:ee:2e:51:80:3c:
21:23:f1:ec:66:7c:34:8b:89:16:f9:39:70:79:52:f4:0d:3c:
4e:16:74:ea:d6:9a:9b:03:0d:aa:2a:4b:9e:f8:7e:93:97:d1:
4e:1e:c7:ee:52:34:31:58:9b:5a:c6:cd:a8:ff:d9:af:85:39:
52:ab:50:2c:ee:38:b7:25:7a:ba:2c:31:3d:7c:93:cd:16:46:
c8:2e:f7:7e:da:2a:4e:26:95:54:9b:9c:1c:15:7c:f9:a1:29:
a3:4e:8a:73:c8:09:99:e6:b7:da:5c:54:9e:4c:64:27:47:45:
1e:2f:30:36:a4:0d:98:89:31:92:e7:3f:8f:2b:0a:98:b0:6f:
ea:cc:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:20:01 2025 by rpki-client