Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: uwefaSKFUl94H4bntjl7XOTb01FMA7wOuq2FNuzvQPI=
Subject key identifier: 89:1C:C7:63:BD:A1:8A:22:6D:4C:56:54:50:23:4B:29:A5:78:23:83
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 0198466447A572E934A36C0899B425C3A191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0E42
Signing time: Sat 26 Jul 2025 11:00:33 +0000
Manifest this update: Sat 26 Jul 2025 11:00:33 +0000
Manifest next update: Sun 27 Jul 2025 11:00:33 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 0HOb07oBS1MWGnQZ+qNYAUJ/IzJwACYnrI6bTrVlSUU=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:47:a5:72:e9:34:a3:6c:08:99:b4:25:c3:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Jul 26 11:00:33 2025 GMT
Not After : Jul 27 11:00:33 2025 GMT
Subject: CN=891cc763bda18a226d4c565450234b29a5782383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:56:7a:6d:12:2d:5f:f8:b7:37:26:53:51:
4d:a8:6b:2e:4f:f7:06:89:07:f7:47:ad:7a:6e:7e:
82:a9:fb:08:53:7c:11:56:7b:ce:55:31:49:c8:a2:
ac:a3:2f:f0:f7:ac:fa:a6:9d:ba:8b:d1:d4:2c:9a:
56:90:e4:28:14:12:62:2c:59:37:70:7b:de:cd:f1:
6e:c7:18:6c:7a:22:28:3d:26:cc:88:02:cc:5b:6e:
7e:43:ce:91:2d:39:85:56:1e:60:64:fe:b9:09:65:
a8:49:31:0f:4a:c2:74:17:65:72:c2:d2:2c:2e:86:
cd:2e:c6:17:09:9c:75:49:66:9b:15:61:7e:09:3e:
b3:4b:e7:01:b9:d5:3e:fb:48:07:d8:f1:46:37:57:
84:1f:36:82:d8:61:4b:bf:a5:c7:5f:ae:4a:a6:df:
e2:e4:4a:ba:33:3c:38:8f:16:c6:27:4d:13:22:bc:
02:d6:93:7b:37:54:55:6e:4e:5c:0e:a1:1f:00:5e:
b0:ab:7c:ad:d5:8c:bf:e3:83:a6:4d:71:be:9a:fc:
b8:e8:2e:30:61:b0:36:7b:fe:ad:4c:c4:43:5f:6e:
b5:c7:79:b9:a5:76:0f:18:e6:70:2e:70:52:83:a7:
49:bb:66:fd:6e:ec:fe:45:9a:32:04:59:3b:ed:4f:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:C7:63:BD:A1:8A:22:6D:4C:56:54:50:23:4B:29:A5:78:23:83
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:6a:30:ed:92:d4:0d:d5:17:20:cf:2d:68:fe:5c:96:20:
df:05:89:10:fa:4f:87:22:58:6b:da:dd:73:cb:e6:65:5e:1d:
36:7a:53:99:f9:94:54:2e:d2:f0:86:93:ef:27:14:14:43:e1:
f6:30:84:e2:3e:68:00:d5:1c:c5:6d:79:c7:bc:5f:61:41:d7:
3e:98:3c:6b:d0:a6:7f:57:a8:1c:0a:e7:12:4b:ca:64:49:a4:
9e:d9:0f:bd:a1:2f:e0:2b:50:e1:a1:98:71:ae:8b:61:da:d9:
e4:af:97:00:78:03:f0:cb:8f:36:41:3b:98:bd:5a:b0:ee:6b:
19:db:f2:53:eb:65:09:ea:51:eb:9b:b0:12:91:77:98:4f:4e:
18:14:7f:90:83:39:8f:b2:4b:76:b5:16:50:ea:ee:07:99:22:
c6:c0:35:76:4a:9e:e4:ea:9b:f5:d1:0f:67:1a:cd:c8:2d:4f:
98:da:ea:b8:c6:3d:13:7a:1a:47:7e:c7:0f:bc:38:31:cb:34:
81:bf:c3:34:50:65:63:df:95:08:8d:c2:6e:9b:34:69:6c:cb:
d8:b8:56:53:da:2d:ef:3f:ef:2c:b7:77:30:31:64:d0:1e:40:
35:d8:dd:14:c7:19:d8:ef:21:da:ff:6b:05:e7:4c:b2:63:f1:
b0:b9:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:59:07 2025 by rpki-client