Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: MTEV9+NhQ2JTERgCLFIVCZIbk3vIatHt2Z20rF+For8=
Subject key identifier: D9:23:1F:31:89:EB:D0:6C:8D:3F:C8:04:19:D4:69:CB:79:8E:18:E9
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019849654F031E7234777257BA2EA64203CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: u2EZn/2QGFmZjXqk6jTqdhIgRGq5tYYrIgB5QB0lm40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4f:03:1e:72:34:77:72:57:ba:2e:a6:42:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=d9231f3189ebd06c8d3fc80419d469cb798e18e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:13:97:16:06:4f:07:14:05:bc:41:c3:cd:
0b:33:34:cc:cb:45:9d:13:f9:39:1b:93:b5:72:a0:
35:78:02:0e:70:bf:f8:69:d3:db:9e:c0:52:9a:44:
c5:91:46:b9:1b:03:7b:2d:2b:26:0a:b1:ec:64:ee:
0c:57:1a:c0:72:53:41:5c:40:0b:be:4c:0e:df:84:
34:b7:60:58:50:08:56:bd:9b:db:bd:d8:de:a0:34:
99:fa:9d:af:27:18:77:ee:9a:d0:f3:b6:9c:e3:61:
3e:41:06:30:8c:34:16:62:de:74:0e:66:84:2d:70:
13:74:d5:cb:80:46:63:94:91:44:78:a1:31:b9:77:
17:ca:90:74:bf:bb:d8:95:fb:d5:5a:74:a4:73:1f:
cc:86:4e:9d:60:89:da:76:29:e8:6c:59:31:d9:aa:
e4:ef:fc:0b:7c:3f:24:f3:0e:3c:3f:9b:b4:d4:b4:
77:ea:6f:4e:96:09:8e:67:42:04:32:80:31:c2:2f:
9e:6e:3e:b4:5b:6a:14:0e:26:df:af:b1:41:d6:8a:
6b:04:e1:a3:3d:2b:47:cf:a7:2e:e3:b8:62:4c:e5:
cc:19:71:3a:50:70:1f:ed:a8:d4:12:c5:a2:a9:d1:
de:6c:fa:dd:46:6a:47:40:02:e6:85:7b:2b:7e:e6:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:1F:31:89:EB:D0:6C:8D:3F:C8:04:19:D4:69:CB:79:8E:18:E9
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:3a:a5:51:1c:bf:c5:a4:b4:b5:00:04:a3:1b:cb:e4:ea:
5b:2c:61:3a:f8:75:44:c7:d4:c8:f8:6a:0b:32:67:98:df:dd:
96:00:11:73:7f:9d:b3:6f:70:a6:8d:b5:54:0f:e4:27:fa:22:
27:b8:60:a5:4d:19:da:a6:ad:45:c3:1e:51:23:bf:9f:fd:56:
ae:a4:a7:c4:bf:b2:c4:64:86:4d:cb:a6:bf:c5:61:06:a6:32:
ec:3c:b0:0f:d1:36:2e:f8:a3:42:f2:2d:3f:1b:b8:9e:77:e2:
64:4d:ee:7f:ae:cc:1e:ae:f3:18:54:2a:c6:ee:83:cf:74:fe:
2f:2a:20:be:6e:40:41:5c:07:77:c0:46:85:85:a7:4c:fa:e5:
0c:4a:85:2e:db:00:30:20:40:e4:27:20:79:41:82:33:19:9c:
14:9b:ca:b4:85:f7:84:1f:c8:50:be:89:ee:32:07:ca:61:ff:
94:53:0b:74:76:89:19:4a:fb:09:d9:cf:59:78:d8:c9:7a:3c:
7d:da:9e:8c:d3:86:7e:0b:d5:f4:2e:6f:db:10:18:c6:71:c6:
38:10:83:a7:a2:0c:73:61:f6:8a:67:99:69:66:5b:33:3a:10:
a6:d7:04:e9:28:de:3c:11:e3:0a:fc:f2:56:9f:83:bd:23:50:
fa:68:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:49 2025 by rpki-client