Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: dbx0pCxWjG5vaGWnkmHWk4ZLkLQsrPC+6rrhwUJFkfU=
Subject key identifier: F3:C3:BD:CA:CD:21:C9:3F:07:11:CB:71:D3:B1:81:BF:F9:33:57:5A
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 01984407AD20328C3D04E68A1809F59A97EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 0412
Signing time: Sat 26 Jul 2025 00:00:10 +0000
Manifest this update: Sat 26 Jul 2025 00:00:10 +0000
Manifest next update: Sun 27 Jul 2025 00:00:10 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: lZdHKHMdu8syKzaaFTod1qEChpYnAielX1r11IDQ6Bc=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:ad:20:32:8c:3d:04:e6:8a:18:09:f5:9a:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Jul 26 00:00:10 2025 GMT
Not After : Jul 27 00:00:10 2025 GMT
Subject: CN=f3c3bdcacd21c93f0711cb71d3b181bff933575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:ed:c3:54:23:60:e3:71:88:87:57:72:76:
f1:9f:5b:a6:8d:ed:f8:7f:3f:a9:d7:e0:38:e1:87:
d9:fd:20:1a:c6:c6:4d:e9:b9:a0:6d:84:13:9a:38:
0e:b8:ae:3a:46:41:6f:14:86:90:c9:2e:5f:d1:0c:
3e:af:8b:11:ef:77:16:c3:7b:d7:e5:53:34:bd:1f:
2e:b7:c9:21:d4:dd:98:18:fd:1c:3d:49:e6:0f:41:
12:7a:cb:bf:1e:4e:35:b7:cd:62:49:c9:3c:26:62:
a8:b1:ee:dc:3a:35:e2:05:3f:b5:0d:64:c0:87:a8:
a5:b7:ef:0f:09:ea:ec:4a:85:4e:ab:55:b8:72:fb:
21:c7:cb:e5:e9:64:3b:69:83:21:9f:14:89:93:df:
ea:1b:a5:eb:65:ca:48:cc:4c:91:f4:f5:08:10:6d:
a4:aa:50:8f:29:ab:b0:e8:28:f3:3a:20:ad:9d:12:
01:91:dd:ba:a8:d2:28:93:a6:cc:bb:e1:5f:7e:e9:
b6:2a:d4:d0:a3:b8:a7:5f:f1:84:3e:74:a7:da:9b:
34:41:e4:9e:6a:9f:8f:78:ff:ad:5e:ee:57:3b:c9:
26:46:06:70:b9:cc:2f:b6:f5:3c:25:74:20:eb:67:
95:22:55:66:ad:6a:46:75:a2:74:bc:32:be:48:3b:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:BD:CA:CD:21:C9:3F:07:11:CB:71:D3:B1:81:BF:F9:33:57:5A
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:6d:74:2d:d2:6d:d7:ad:7d:53:44:c8:97:31:52:6a:50:
88:b6:bf:50:f2:df:3d:7d:2a:57:4b:b3:d5:69:9b:a6:dd:d3:
1d:bd:1f:69:fe:dc:8a:e5:8a:50:7d:8b:6f:6e:3f:e1:5d:fb:
66:3a:35:61:22:ce:fd:8d:ad:fc:d8:c5:8e:6b:82:41:f0:70:
af:be:7f:fe:8c:e6:65:ed:1c:7d:be:52:92:d3:93:c1:0a:df:
c7:ba:db:3e:42:f0:42:ea:90:e1:ec:33:28:26:aa:ae:4d:05:
af:c0:b9:9e:67:7e:74:5f:94:46:b5:54:aa:2c:98:8f:bd:bd:
fa:9b:dd:66:01:15:6d:55:76:cd:83:68:d4:69:1e:e8:83:f4:
35:9b:a9:a7:f1:51:b1:15:2b:74:a6:5c:09:a2:fc:3b:9c:77:
4c:8f:b5:b1:97:fa:76:8d:7c:f7:a4:c0:3c:29:88:18:e2:56:
c1:73:de:34:ba:49:39:96:7b:45:db:58:c1:35:60:3c:56:ed:
21:70:11:29:d2:0d:95:6d:cd:3e:e5:71:4b:4d:1b:b5:3a:af:
e2:79:cf:0f:83:7e:cd:90:45:18:f9:85:44:71:af:82:9b:2b:
01:dc:9d:bf:02:37:bb:2f:1d:94:36:b3:4b:12:b9:cb:e7:bd:
e0:26:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:20:44 2025 by rpki-client