Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: RviBWb9byM0EswN8i6KunF4kzzH0TjjvePVJm4HCHAA=
Subject key identifier: D3:21:64:1B:84:48:B9:02:5C:98:B7:41:A6:71:9D:3C:49:0E:E4:4F
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01983C856C4D6374D4194E6579FF2446310C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 13:00:33 +0000
Manifest this update: Thu 24 Jul 2025 13:00:33 +0000
Manifest next update: Fri 25 Jul 2025 13:00:33 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: rY3ARO7c0uzQqVzEOoUpnoP/1x1mKYoNuSRnChLgqw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:85:6c:4d:63:74:d4:19:4e:65:79:ff:24:46:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Jul 24 13:00:33 2025 GMT
Not After : Jul 25 13:00:33 2025 GMT
Subject: CN=d321641b8448b9025c98b741a6719d3c490ee44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:a4:81:41:8b:4c:77:42:c6:b9:fa:6f:50:
7a:c3:84:5f:a0:1d:f2:75:ba:eb:f4:a5:c3:26:22:
6b:11:8f:3a:ea:62:d7:14:45:d1:82:9f:00:08:79:
49:bd:33:2f:1c:57:d9:aa:2d:7b:4e:61:9c:b9:2b:
73:bf:0a:e4:0a:7a:64:b9:a9:2c:c9:f1:47:d0:08:
ae:38:38:77:a6:a4:04:43:7a:4e:00:a7:8d:ca:07:
39:36:74:55:b8:71:e3:7a:1d:a8:58:b3:5f:c5:64:
fb:99:92:2f:be:8d:93:f9:c3:db:17:af:ad:d7:9b:
6c:ed:f0:a5:08:19:54:e3:a8:af:80:25:46:ad:8c:
53:a8:ff:6e:ab:89:d4:c4:58:0f:48:cd:68:b5:2f:
b1:ea:45:28:e8:1c:13:b7:c1:7f:a1:70:c9:3d:78:
d0:01:41:a5:f4:79:36:7c:12:17:c4:29:a9:39:a9:
39:ed:39:f6:2f:86:71:08:9c:33:0c:58:92:85:f8:
38:73:f5:2d:14:d5:ab:35:7d:dd:c7:03:7d:d3:b5:
22:54:cd:69:37:63:7f:70:1b:86:6a:bd:af:f2:86:
28:3e:a6:7b:d3:a2:3e:02:44:72:9d:e4:83:8e:ce:
39:c3:45:45:58:3a:5f:0a:54:d8:2c:96:8b:23:d7:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:64:1B:84:48:B9:02:5C:98:B7:41:A6:71:9D:3C:49:0E:E4:4F
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:08:1b:ef:b5:2a:46:89:d9:9f:01:5e:20:2f:4b:bb:22:
f0:2b:2d:82:41:7d:f3:ce:eb:c3:43:7f:5d:e5:62:f7:6c:b2:
60:d0:df:7e:e0:19:e3:e8:bf:f6:a8:29:21:da:f7:51:ba:8f:
88:b3:33:b8:54:40:f8:7b:f5:a2:89:c5:7d:56:51:78:35:92:
3b:24:73:a1:c1:87:12:d6:9f:15:83:30:cb:f1:c8:a4:ea:6a:
2c:7e:43:d6:a6:04:2f:a7:e0:e2:92:25:bb:9b:c9:1f:88:92:
8a:60:14:c4:cc:86:27:e3:73:11:b7:b0:60:9b:f6:da:be:a6:
1b:02:12:07:38:1d:a8:8b:98:44:a8:0e:77:a3:e1:d6:2f:43:
f3:c7:75:52:1a:bd:98:ab:ff:2a:8f:ee:63:b4:4a:bf:86:cc:
1b:10:99:42:0b:39:a9:73:12:7e:52:18:c0:12:70:2d:93:e7:
46:30:a9:a5:ac:81:0f:d4:20:f3:63:2b:9e:78:54:68:5c:87:
f4:36:71:49:6d:db:55:05:cb:3d:9c:5b:c9:a1:c5:a2:38:d1:
6f:fa:0c:e7:4e:ce:6a:90:ee:60:b6:8c:e2:29:bb:0b:ba:ac:
a7:4b:1a:b8:e3:69:44:c5:87:54:61:aa:0a:c0:bd:1b:a7:af:
27:c2:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:57:38 2025 by rpki-client