Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: eqsxnwHmqxwgqpxpr+awzA8q2y0nFS9/VevCPKpnALA=
Subject key identifier: 74:1C:AB:0B:00:05:81:05:06:32:71:73:10:FB:6D:AD:A4:D4:24:5C
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0198477739E9A6438D57C112DE5EEB293509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0ABB
Signing time: Sat 26 Jul 2025 16:00:52 +0000
Manifest this update: Sat 26 Jul 2025 16:00:52 +0000
Manifest next update: Sun 27 Jul 2025 16:00:52 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: Lpm3ROo6SGWI3BdymwbSD7ORZa00+gaxmNb3T64Id4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:39:e9:a6:43:8d:57:c1:12:de:5e:eb:29:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Jul 26 16:00:52 2025 GMT
Not After : Jul 27 16:00:52 2025 GMT
Subject: CN=741cab0b000581050632717310fb6dada4d4245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:d4:26:13:07:ea:55:c3:0f:c2:0b:0d:49:
8c:51:07:d1:d9:5b:c0:59:c8:88:1c:21:c3:ed:41:
88:08:b1:b6:6e:ec:f7:07:28:81:f7:64:27:ec:d9:
4d:48:a9:ed:d8:38:85:59:a4:eb:07:69:9b:ea:c6:
80:f8:b8:5c:d7:8a:5b:ff:4b:1c:28:cd:12:86:81:
80:ea:48:b9:2e:23:5f:07:e8:9b:d7:a1:3a:0e:0c:
06:f8:e1:2e:44:de:bf:d5:9f:22:70:b5:33:47:3d:
92:33:f9:7c:09:7e:20:a0:1e:21:db:c7:e4:b0:bf:
03:6c:e2:a8:be:a9:92:00:eb:cb:7e:57:85:ee:25:
2a:16:ba:c8:e5:72:e6:8b:38:a9:a4:e2:e7:68:1c:
f6:64:0e:ac:7c:ed:a3:52:c3:04:73:a1:5a:47:42:
e5:09:5d:37:3c:71:ed:cd:00:cb:72:99:fe:d9:ae:
07:a9:63:ea:67:d1:89:80:32:b8:c8:83:02:89:37:
dc:1b:27:1e:1f:63:97:e3:76:7b:af:71:0c:61:7e:
06:eb:0f:4d:78:8d:37:0e:c0:18:1d:2e:5c:87:60:
57:ac:5e:28:7e:17:d9:1f:26:97:32:04:c9:6e:03:
2c:a3:b4:ec:c1:71:2b:17:5e:a1:70:72:4e:3e:1d:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:AB:0B:00:05:81:05:06:32:71:73:10:FB:6D:AD:A4:D4:24:5C
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b5:0c:82:28:c3:b7:2c:64:9b:5e:4b:e1:4d:69:35:3e:98:
f1:bc:54:bc:29:19:52:bf:3d:e9:41:5e:fb:ff:0f:53:14:3d:
2c:48:3a:84:d4:8b:6f:41:ca:83:e1:de:4a:39:58:07:e9:67:
d9:7a:41:e8:e5:99:83:82:43:cf:13:b2:3f:ac:06:96:15:0d:
09:56:6c:cb:28:3d:78:b8:d9:f9:24:da:82:28:52:f3:3b:60:
bf:2d:30:c6:e9:56:70:11:92:83:e6:f1:0e:3e:8a:04:2f:51:
56:e8:88:a9:a9:0a:0e:0d:b0:66:c5:f3:2d:db:82:c3:a3:82:
d0:32:f1:00:ed:fb:ea:77:72:8e:d9:23:83:99:3e:02:57:f6:
99:63:e6:a8:0e:ba:d5:cb:c9:5c:2b:0f:e9:9b:c2:63:ea:43:
18:f8:07:12:f3:9c:3e:97:08:b1:5d:37:4b:fc:9d:bf:eb:55:
67:5e:50:65:0c:25:65:a7:b4:af:cb:10:7d:9c:b4:b0:6d:e7:
9d:22:c3:2e:30:c9:7a:56:69:9f:3e:2f:2c:cf:e9:f8:d8:26:
9e:43:52:6b:85:85:b0:be:d5:4b:8d:aa:e2:1c:a7:f7:5d:0e:
d5:5e:b6:0e:b6:bd:61:e7:60:10:e5:7e:02:32:3d:7b:b6:a3:
4b:cc:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:28 2025 by rpki-client