Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File: dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier: Gml1xEskjflPUtwRaqXyvs6Oyly2BJ4hKlOMcc6Q5Jo=
Subject key identifier: 35:28:CE:84:44:2D:C1:E3:FC:A9:A9:56:B8:C7:24:AF:24:41:35:07
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 0198342743B415BB226C3592D97A8AEF9577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number: 05E9
Signing time: Tue 22 Jul 2025 22:00:45 +0000
Manifest this update: Tue 22 Jul 2025 22:00:45 +0000
Manifest next update: Wed 23 Jul 2025 22:00:45 +0000
Files and hashes: 1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: 8s235foSvz68PYVNNic0ZoC43H9otzMMnIkvtmpyF0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:27:43:b4:15:bb:22:6c:35:92:d9:7a:8a:ef:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Jul 22 22:00:45 2025 GMT
Not After : Jul 23 22:00:45 2025 GMT
Subject: CN=3528ce84442dc1e3fca9a956b8c724af24413507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:38:2e:82:0e:2d:c3:b0:d1:5a:3b:a7:ec:
92:f8:93:d0:1a:7c:0f:e6:10:25:db:37:22:56:5d:
b8:75:fe:9a:12:ef:fb:37:96:3f:63:c7:c8:ce:6d:
7f:52:06:65:8f:43:90:83:95:9e:fa:9c:4f:42:0d:
c9:ce:18:cf:02:9b:70:77:ff:2e:df:18:23:6b:65:
42:63:83:59:f1:3d:c9:c4:89:d9:a0:22:6b:90:99:
c7:31:5a:27:61:d8:ce:cd:d6:f0:31:e0:fc:e3:ac:
49:26:42:24:3e:68:9f:46:a7:43:c7:cc:a3:05:51:
f9:64:16:49:4c:61:63:e2:ee:9b:e4:db:2b:48:a8:
fa:e2:68:c5:a4:d6:33:65:3c:fe:7d:1a:fb:71:3a:
7c:44:13:3b:6a:c4:ab:a2:c0:1f:c3:13:73:99:ea:
33:cf:0f:15:1e:dd:10:34:f9:6e:97:bc:ce:7c:49:
4a:2a:3d:ea:16:fb:5a:74:e2:a5:3f:6f:73:6c:9f:
98:ca:a7:72:cd:64:d8:a4:b5:5e:df:f6:ab:fe:64:
4f:f6:78:31:a8:11:a0:d2:a0:81:dc:b4:fe:58:87:
3c:82:28:9f:89:f0:64:c0:58:2f:b2:69:74:45:25:
7b:2d:62:a9:96:35:85:df:d9:5d:d1:64:c0:33:f8:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:CE:84:44:2D:C1:E3:FC:A9:A9:56:B8:C7:24:AF:24:41:35:07
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:1e:65:da:fa:44:d5:e4:8a:65:78:0b:f3:91:29:bd:d3:
10:01:25:d4:47:01:23:65:ec:66:81:57:22:dd:bc:ec:ee:b8:
f6:9b:3e:ed:99:13:f6:e8:27:6f:fb:41:af:f4:b8:7e:c1:34:
ce:ce:18:59:1a:7a:a9:3d:dc:10:4c:52:b8:6b:83:2e:36:c8:
36:e5:54:89:77:44:46:da:dc:a0:4c:9b:55:71:06:e0:75:16:
f7:ff:c8:15:e5:6e:ff:df:c7:84:31:3e:c8:d9:4c:22:e0:43:
14:ca:19:c5:fa:89:ee:5a:5c:9e:22:fc:35:0d:0c:b8:de:82:
04:88:f0:be:b6:7f:1d:5f:59:23:07:78:a4:6b:4c:b5:28:b1:
58:9d:7f:8f:d0:77:bc:22:1d:76:26:0f:31:2d:ed:5b:3a:6c:
f0:c9:4e:6a:c5:98:c1:c8:c6:f1:9d:fd:9d:50:ff:1d:14:3a:
92:6b:d6:90:8c:e0:a9:6f:ac:6a:63:66:42:e3:ca:e9:2b:63:
1f:1d:f4:8a:7f:a1:66:0e:d8:fd:67:b2:60:63:d6:20:35:47:
64:dc:58:83:ec:22:ae:c2:1e:15:cc:44:2d:19:2c:a5:ee:ea:
d9:28:f3:d7:5a:82:7f:6f:b0:b5:3a:a4:4e:7d:62:e4:92:97:
de:83:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:06:39 2025 by rpki-client