Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: PAELjXb9aF1KvErn68cJOvOSTMcEN8Zi5KJeUfVXyzQ=
Subject key identifier: 54:E7:06:E9:00:7E:64:52:71:11:27:3D:66:F9:30:C8:60:9A:38:BB
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 01984B536FF92B98D8A98E8CBD430BC48EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0F6D
Signing time: Sun 27 Jul 2025 10:00:16 +0000
Manifest this update: Sun 27 Jul 2025 10:00:16 +0000
Manifest next update: Mon 28 Jul 2025 10:00:16 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: TmZj7eL9S2O6I1Ah2LQZJQ456xgwEAMA2TvEqVZ+kuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:6f:f9:2b:98:d8:a9:8e:8c:bd:43:0b:c4:8e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jul 27 10:00:16 2025 GMT
Not After : Jul 28 10:00:16 2025 GMT
Subject: CN=54e706e9007e64527111273d66f930c8609a38bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:13:9a:b9:94:14:92:a0:4a:41:9e:d4:50:
2a:00:48:bc:e8:72:93:a2:23:d3:07:69:73:d6:4d:
fa:3b:8b:1e:40:35:ee:d9:fd:84:1e:f6:3b:3d:b8:
0f:25:86:06:16:f9:89:f6:4e:ea:8e:45:71:59:7a:
a1:ba:5b:53:11:60:13:38:ec:a6:a7:f0:e5:f0:96:
ca:be:8f:34:b9:d9:e6:aa:d0:33:2f:8c:a6:1b:f3:
7e:bf:f2:f4:d0:8b:13:4a:2a:bc:16:cb:2f:a7:a4:
6e:35:95:0c:90:9f:65:0d:d7:c8:53:77:4b:41:79:
69:21:9d:bf:60:40:16:60:db:42:62:bd:ae:bf:11:
ea:fe:06:59:5b:48:79:d5:96:90:7b:b3:5e:d4:0c:
9d:40:cc:d4:b6:44:42:2e:62:fe:4b:be:f7:e9:09:
c4:24:bb:c5:97:e9:b3:bc:6b:1f:86:d4:26:3f:00:
f5:0b:89:b6:6e:0e:fc:41:7d:85:79:19:6f:8c:e4:
91:ed:4c:dd:f4:2c:26:15:b3:d5:c8:c1:02:5d:43:
f9:b8:0f:a2:33:50:c7:e0:39:a6:0a:ec:69:6b:94:
9e:df:d8:da:78:bc:16:87:c3:3e:94:5f:5f:02:c4:
f6:7e:b3:59:84:7f:52:f8:63:ae:0d:33:91:79:88:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:06:E9:00:7E:64:52:71:11:27:3D:66:F9:30:C8:60:9A:38:BB
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:89:78:87:21:c6:1f:f1:3f:45:a6:40:da:37:fe:6f:fc:
83:f2:82:37:31:4a:9e:97:ff:05:24:d3:15:e5:2e:fe:51:92:
3c:ff:0c:72:09:20:44:a7:4b:c8:1b:2f:90:28:c5:93:e4:6a:
e8:fa:12:e7:81:13:6b:44:d9:11:46:f8:05:ba:41:83:f4:c8:
e4:d3:b5:57:b9:96:14:e9:5b:cb:d5:01:8a:3d:ce:84:3b:39:
06:e1:80:ea:90:a0:2a:30:c2:33:f9:2c:76:a9:65:9a:20:99:
3d:6f:fb:ad:dc:21:94:a8:a0:08:01:a1:8a:77:f0:cd:9c:67:
21:b9:f5:5d:6a:53:ec:83:64:e8:1d:29:3e:af:88:db:c2:b3:
6a:c2:d7:92:6c:06:98:69:ce:f3:58:0c:de:90:d0:13:f8:99:
a3:1e:a1:06:56:c5:c9:1e:85:2a:c7:0a:67:03:81:80:b9:ff:
82:df:a7:9e:e5:5c:1a:22:f2:8d:4b:4c:fb:4d:b7:24:09:c9:
5b:89:88:2e:23:2f:d5:af:d9:47:98:e8:ba:01:46:66:e1:6b:
b0:8b:10:64:82:28:b6:8c:00:82:a4:4c:cd:0d:64:3b:87:f7:
f7:4d:9a:f6:74:f7:c8:a7:dd:fd:dd:4a:ce:50:da:32:c9:2d:
7f:7c:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:49:03 2025 by rpki-client