Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: JH2K75gTcJSGOFu1FBQtNuZsTdMCVfHdbJEHWrsXrl4=
Subject key identifier: 2D:F0:8C:C3:66:18:05:AF:32:D8:B5:FF:90:F2:8F:45:E7:0C:F1:6F
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019849672917255D50E89AD464326A1D7906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0730
Signing time: Sun 27 Jul 2025 01:02:34 +0000
Manifest this update: Sun 27 Jul 2025 01:02:34 +0000
Manifest next update: Mon 28 Jul 2025 01:02:34 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: 8apknAxjiPvRqEuRKc129hxGuRb5Ap48U13KrhZBp9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:67:29:17:25:5d:50:e8:9a:d4:64:32:6a:1d:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Jul 27 01:02:34 2025 GMT
Not After : Jul 28 01:02:34 2025 GMT
Subject: CN=2df08cc3661805af32d8b5ff90f28f45e70cf16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:17:d4:9c:68:bd:03:dc:92:e7:4b:c0:97:
23:0e:26:74:2c:00:e6:56:6b:74:11:0d:ab:53:b5:
d9:6a:e7:bc:3b:26:eb:3e:49:4c:43:b8:4f:38:1c:
de:58:c8:45:4f:d4:3f:23:d7:2c:ff:fa:6b:c5:fa:
ae:be:5e:7e:33:83:fb:a8:06:11:a9:ce:5c:b2:a5:
03:7e:e4:80:ae:c2:54:fe:cd:59:cd:d8:2d:67:25:
2c:30:ed:0e:93:5b:57:12:b8:8a:e2:4e:d8:33:5f:
05:b1:77:9f:3d:1b:e9:4d:36:56:81:e9:fd:4c:52:
6e:47:85:d1:34:69:50:cb:79:1e:f1:59:e0:a7:9d:
15:88:7d:81:55:14:12:fd:40:51:4f:aa:0c:3f:37:
16:b0:b8:b1:a4:1d:f4:8e:51:69:e2:f9:71:0e:ab:
12:b7:96:86:12:e9:a3:19:85:60:61:48:fb:a9:3c:
32:f0:fb:f0:1e:2f:e4:2e:f3:9a:10:08:9f:7e:1c:
08:19:79:b2:9e:4b:d5:55:ed:d1:5f:10:1a:3c:f8:
22:09:8a:b1:80:25:cd:5b:b1:74:38:9e:dc:34:13:
06:89:be:46:e0:21:1b:34:8e:4b:83:b5:6a:bc:11:
6b:f2:75:a9:3e:db:28:52:44:b2:1e:91:36:27:28:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:8C:C3:66:18:05:AF:32:D8:B5:FF:90:F2:8F:45:E7:0C:F1:6F
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:0c:32:7f:d1:8f:e0:5f:73:6e:10:cf:51:70:02:ad:ab:
dc:84:ee:51:5b:de:bd:10:ea:89:7f:70:67:6d:fd:09:8e:32:
13:7f:e8:e4:10:63:d8:5e:d3:a6:48:69:f8:f8:5c:6d:4c:29:
27:00:35:c9:4d:fc:b9:cf:cc:04:c8:e0:3c:82:1a:7c:d4:f9:
f9:4f:3d:a9:33:b9:c1:a1:c6:b7:b2:a1:56:f6:47:4b:30:fa:
fd:48:db:1a:0c:d6:fd:66:b4:2a:5a:b9:4a:69:24:ef:64:37:
4c:1f:53:fd:96:a6:b9:64:70:27:a8:6d:21:55:69:35:44:c7:
47:ac:78:48:39:b6:3b:65:c4:0a:30:01:24:85:eb:e9:bd:c6:
e7:4f:14:9b:17:24:38:82:82:8d:21:bd:dc:9a:de:e0:2d:5d:
a3:c7:07:c7:e1:9d:03:fe:c8:f1:8c:6a:83:27:91:6a:ef:53:
0c:11:26:1a:2f:8c:4d:3b:5e:5e:92:5d:7e:40:58:3d:2e:1e:
8c:64:1f:21:97:cf:fa:e0:d7:b2:05:b6:10:f8:02:8c:dd:a7:
6e:84:d3:3d:5e:77:65:a8:06:bd:da:f7:94:64:38:68:51:19:
05:cc:ee:34:86:79:c0:f3:03:40:25:21:f3:ec:17:1d:f3:ca:
e5:ed:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:11 2025 by rpki-client