Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: unLOvSZ100A9C3u6AEwNKSorAfn/VWVtTKEghWq+5Io=
Subject key identifier: 60:8F:A1:E0:B1:47:51:99:A7:B9:E3:32:3F:18:A8:A9:3C:FA:6C:CF
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01983570DC06CFC209BCE1D28AFD92B7611D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0DCF
Signing time: Wed 23 Jul 2025 04:00:45 +0000
Manifest this update: Wed 23 Jul 2025 04:00:45 +0000
Manifest next update: Thu 24 Jul 2025 04:00:45 +0000
Files and hashes: 1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: DSVVmSh+medmSiA3IqosmDcz0gJs0kutwAqAgRUSxQk=)
7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:dc:06:cf:c2:09:bc:e1:d2:8a:fd:92:b7:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jul 23 04:00:45 2025 GMT
Not After : Jul 24 04:00:45 2025 GMT
Subject: CN=608fa1e0b1475199a7b9e3323f18a8a93cfa6ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:3b:ef:c5:46:7b:3a:7e:a6:79:9a:3a:21:
68:f4:f3:7f:bb:9d:50:9a:86:c9:8e:dd:da:84:54:
a5:a5:4e:62:b8:42:72:76:be:30:0b:d7:70:ae:43:
2b:89:24:19:ef:12:51:04:1e:5a:ec:0a:ca:a1:ab:
db:a6:4f:b1:d9:2b:92:5e:8e:62:ae:db:c8:24:26:
ea:b6:a1:8c:c2:58:30:38:fd:b1:4f:81:84:60:04:
ce:e9:5e:a8:60:dc:2e:34:bb:31:bd:f7:ee:ec:dd:
e3:2a:99:6b:e4:31:29:ae:6d:61:5b:9f:57:4b:56:
ba:32:cf:80:ac:99:67:0c:a5:12:d1:6c:0f:15:43:
8e:43:77:a2:c6:43:a8:74:b2:50:ba:72:f4:72:94:
03:97:b7:45:10:4c:2f:3b:ea:3f:79:1a:5b:53:de:
19:e3:a5:9b:c1:85:dc:c0:58:68:d4:86:a6:ee:35:
dd:31:a9:18:a1:74:72:be:7e:56:ea:98:e2:ea:a3:
85:54:f6:33:1f:51:91:08:11:6a:4b:e4:4e:8c:c0:
ea:c0:31:ac:9c:13:09:dc:83:1f:77:87:7f:d4:b9:
f6:f4:c3:7f:3d:a8:37:35:5f:76:20:77:7f:83:e9:
ee:be:6a:dd:b6:53:8a:a8:67:75:28:6e:6e:16:ce:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:A1:E0:B1:47:51:99:A7:B9:E3:32:3F:18:A8:A9:3C:FA:6C:CF
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:f0:5f:9b:87:b7:b4:e0:dd:0b:3f:0a:69:f7:d9:5c:0e:
2d:ac:2c:76:0c:eb:76:fd:f6:fb:94:4a:36:55:95:1c:43:63:
c9:13:3d:51:1e:eb:9d:ec:21:5a:2d:29:76:95:16:ce:65:95:
f1:b9:88:cf:99:8a:56:31:4d:c1:83:7f:75:46:9b:f5:28:20:
9d:4d:cb:6d:98:70:9a:11:5c:5f:ef:44:df:ee:b1:eb:7b:a6:
4a:ca:d6:13:3d:90:24:e4:9e:c0:82:10:ed:3d:a1:a8:c9:f5:
f0:3e:7a:27:fe:2a:0c:5e:34:c1:46:27:a4:12:d4:b4:fc:75:
05:a0:40:20:d5:d5:10:58:3d:0b:da:42:fd:5b:df:c0:bf:fb:
a9:0a:b1:79:9b:2f:3e:0b:23:c4:b4:91:ad:6e:5e:f7:a0:d2:
23:1f:7e:61:a4:8c:ec:b7:7f:8d:98:26:28:dd:e8:3b:9c:58:
06:0c:06:67:de:39:e7:54:8b:53:d3:e4:d2:56:00:4b:bf:8f:
5a:68:fe:2c:25:7d:80:92:08:12:7e:57:fa:9c:6a:81:81:7b:
db:b8:cd:db:b6:09:7c:b6:8a:be:b9:6c:f3:7f:5d:ba:d9:34:
dc:9c:91:3c:b6:bc:b4:4e:5d:34:35:de:23:a4:51:5d:41:ba:
e7:ea:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:13 2025 by rpki-client