Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: GJBlK2XSDQ5Gfr8dj91EyIMRBNzN+9qBu4WkgLnH46s=
Subject key identifier: A0:DA:99:F4:BF:18:4F:46:FC:D3:07:B5:58:01:2F:9C:05:6E:E2:4B
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01984AE57DCBD9EBBE7D94AF2F36601B49AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:10 +0000
Manifest this update: Sun 27 Jul 2025 08:00:10 +0000
Manifest next update: Mon 28 Jul 2025 08:00:10 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: EtdAyM+LMDcx28OOhva35A+wwYt6tcZXoHuTixkDOEA=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7d:cb:d9:eb:be:7d:94:af:2f:36:60:1b:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jul 27 08:00:10 2025 GMT
Not After : Jul 28 08:00:10 2025 GMT
Subject: CN=a0da99f4bf184f46fcd307b558012f9c056ee24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:29:9a:bb:c3:34:d4:22:13:81:69:d6:64:
5f:80:98:7f:07:51:d9:6d:0c:4a:cb:81:7c:79:a4:
35:29:09:73:11:03:c9:b6:ce:3e:21:a0:bd:f2:33:
77:b6:1c:aa:81:ed:d9:e1:bd:1f:20:5c:51:56:89:
c6:0b:38:1e:66:20:ee:71:a9:69:ea:39:0b:7b:ea:
c7:72:f0:c9:71:de:fb:5d:8d:e4:f5:30:b8:2b:51:
71:ab:c7:8b:99:b3:7b:b7:f9:c9:d7:de:56:7e:94:
1a:38:ee:2c:0e:c1:ee:ac:56:6f:02:81:56:0c:ba:
83:92:43:26:dc:11:47:42:1f:52:5c:59:45:17:f9:
8d:a5:d3:e6:3c:5b:9c:59:c3:eb:5d:aa:73:a7:3c:
b7:96:02:09:f0:7f:54:9d:2f:20:fb:d9:bb:70:f0:
8e:8d:e5:af:50:dd:f0:35:03:bd:87:8a:c1:49:31:
b1:ea:94:06:aa:85:1f:1b:d7:c2:59:b5:55:c2:11:
53:27:92:1c:38:74:d9:78:8d:48:fc:c9:87:65:e4:
71:8c:c8:f0:32:a2:4f:0a:84:5e:de:ff:f6:3f:ac:
f6:40:b8:0e:89:53:f3:13:47:8a:a5:28:14:0e:e9:
b5:e5:b2:42:09:07:ba:98:65:e1:bd:ba:10:20:af:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:99:F4:BF:18:4F:46:FC:D3:07:B5:58:01:2F:9C:05:6E:E2:4B
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:d2:88:3a:db:78:c0:ac:04:08:6f:be:c1:d1:b1:9f:a8:
bd:87:4f:7e:23:4e:25:dc:36:b3:94:3b:e5:86:67:4d:ed:0d:
03:17:7e:c2:93:e8:b3:e3:b5:7b:2d:84:ed:02:d6:65:95:33:
ce:3a:79:ff:8f:5b:c7:d5:42:76:df:f8:27:af:a3:e3:40:b9:
ad:74:16:0e:64:23:07:f7:9a:c2:7f:10:95:e2:fd:61:14:b5:
02:a5:1d:cf:00:02:c3:9d:8f:ba:e9:b9:30:19:c5:9a:65:aa:
f9:5e:61:e6:bd:09:ce:21:06:ba:bc:ea:15:f1:d7:52:ea:b4:
66:9d:1d:dc:6b:f0:4d:b0:d1:37:04:97:d0:8c:84:1f:8e:c1:
18:ac:e3:70:7d:93:8e:6f:6b:29:07:1f:89:09:9c:c5:96:4e:
73:b2:6b:cf:88:ac:4c:54:ec:65:54:9b:16:ab:54:dd:ad:3b:
99:2f:8c:ee:e0:2c:0a:84:79:0f:1e:9f:6f:8a:c0:0d:02:71:
5d:54:92:38:8a:6c:54:6c:69:3e:f7:c2:26:f0:00:fc:d2:57:
87:94:85:e4:f1:6a:52:04:3d:81:bd:50:c7:38:e7:9e:bd:5b:
65:93:dc:ff:10:4b:f1:f0:7b:04:5d:3e:2a:c3:22:18:6a:e5:
e1:ab:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:09 2025 by rpki-client