Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: m0InOy8llC8I1PJm1ZFjSTXxT2rRIrAoe/7lOaN2JSA=
Subject key identifier: C3:1D:4E:FE:9F:B4:BA:B3:63:47:F6:14:1C:04:C0:B6:88:37:3D:30
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019827102FB7212C97B41764C6911D451FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 15FD
Signing time: Sun 20 Jul 2025 09:00:28 +0000
Manifest this update: Sun 20 Jul 2025 09:00:28 +0000
Manifest next update: Mon 21 Jul 2025 09:00:28 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: MffnwCyFAUN1cIu0hI8FbolAN24.roa (hash: EymH0H7Gnm80GdddcNjrz/YuHPOBFOgspnFOthB9pVY=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: g2Ol3fr+GTDJcGt8jAvWAL0z7mmuA3k72S6eYrZP098=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: rnDodB7s0gpQktHMSBT-hXUItaw.roa (hash: scf+UDgeFvA9fGqtgPdgrgkpCdxYh0GIU5nzCuRrgH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:2f:b7:21:2c:97:b4:17:64:c6:91:1d:45:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jul 20 09:00:28 2025 GMT
Not After : Jul 21 09:00:28 2025 GMT
Subject: CN=c31d4efe9fb4bab36347f6141c04c0b688373d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:c7:03:8d:40:30:7a:91:85:43:af:47:fc:
a8:af:45:15:32:b6:75:64:f8:eb:e0:01:73:2d:20:
b1:2c:1d:b0:af:49:49:f1:f8:b2:a5:26:71:95:13:
7a:df:a1:2b:6c:4d:ef:f8:aa:55:4f:b3:3e:33:1d:
77:4b:66:64:5e:7b:0d:df:61:1c:f0:0f:50:4b:f3:
b6:94:cb:88:03:a1:93:61:a2:d8:fb:43:5b:1b:aa:
94:e1:a7:e3:ce:af:11:ba:f2:84:19:af:d6:a2:f7:
9a:57:3b:94:5e:52:6d:cd:2f:a1:5e:79:d9:74:31:
6d:84:0a:ec:44:4c:fa:49:d5:c5:2a:c4:91:31:90:
a7:64:8e:55:bd:35:51:f6:0a:e1:24:a1:70:50:fe:
e5:45:7e:98:4a:02:62:f3:ac:24:6d:d5:ec:3f:f9:
27:37:3f:cf:3f:d1:34:8c:0c:47:ac:a5:b2:c7:d1:
0c:40:32:d6:ca:50:2a:40:54:69:94:33:64:56:ee:
ae:39:cb:84:da:12:fe:cf:92:8e:77:c3:f2:14:ec:
ff:81:00:57:1c:2e:d0:e8:0e:ae:ea:1a:df:0f:56:
b1:36:0b:5d:f9:14:fe:0f:95:28:b3:a0:ec:3d:13:
ef:1d:6c:64:5a:84:70:f6:ff:fd:07:83:24:1a:8a:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1D:4E:FE:9F:B4:BA:B3:63:47:F6:14:1C:04:C0:B6:88:37:3D:30
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e9:9a:49:41:c1:b6:e4:4a:fb:13:ab:77:34:1a:20:37:78:
34:ba:98:fe:13:61:ca:51:1f:5a:55:74:c5:ae:4e:d0:e8:bf:
53:b1:d0:5a:32:61:f6:fd:7b:56:c6:6e:01:d0:14:a6:90:78:
df:42:f6:54:06:95:e3:3f:a7:df:a5:0f:c7:3e:ac:ca:f4:ed:
87:b0:58:25:bd:d7:ea:87:99:2c:d8:50:ae:49:cb:bd:4f:7b:
cb:cb:dc:1a:c5:83:88:11:4d:f8:99:38:6a:b5:84:af:33:09:
cc:47:87:3a:e7:71:7d:2c:1c:e1:d0:35:18:09:f6:4a:8f:d2:
d9:f3:37:34:c9:c3:0b:39:d6:4c:7c:bb:52:91:38:dc:f2:0d:
1a:8b:f4:2b:c6:32:9c:46:ea:d5:9e:bc:1a:f1:78:d1:87:8f:
44:2e:8a:f8:6b:b6:43:57:f1:e4:56:1c:01:35:ef:2b:88:7d:
89:b9:3f:47:89:ff:07:e4:c6:18:d4:5b:58:17:e0:82:a5:c9:
15:c1:1e:cb:97:81:29:0a:5c:64:b4:3a:f9:ab:52:82:e9:98:
f6:bd:44:98:69:bd:ba:83:3b:02:e6:02:9b:41:1d:85:3e:96:
11:ac:fd:ad:70:0c:b7:ef:a7:f4:fd:db:bc:ce:97:8c:42:54:
3a:f7:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:29 2025 by rpki-client