Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: yJ7Zx8qv/zDnp1+lJnYexVRoeuHfifz0rmRRFxig+ZQ=
Subject key identifier: D9:65:61:02:66:B8:51:F5:96:69:28:3D:A2:D6:B0:9D:BC:E4:50:CB
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 01985344764CEF28D0881CD1D61A5E77E35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 1015
Signing time: Mon 28 Jul 2025 23:00:52 +0000
Manifest this update: Mon 28 Jul 2025 23:00:52 +0000
Manifest next update: Tue 29 Jul 2025 23:00:52 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: jOYFMJHQyh50YrAsr2Ya4fuBiMAy6CL3u5+/+dtFIaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:76:4c:ef:28:d0:88:1c:d1:d6:1a:5e:77:e3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jul 28 23:00:52 2025 GMT
Not After : Jul 29 23:00:52 2025 GMT
Subject: CN=d965610266b851f59669283da2d6b09dbce450cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:76:8c:9f:25:6a:6f:4a:64:7d:2b:5b:0f:
cd:bc:69:1d:57:00:20:f1:cc:95:09:1b:1a:05:a9:
71:b4:6f:c6:a6:70:9c:35:f3:df:1a:dc:af:bf:be:
fa:5c:ed:55:b3:c6:ce:9b:3b:aa:8d:e2:a5:ad:a7:
88:f3:b4:35:a8:34:bc:4e:e9:ee:dd:95:03:94:58:
fc:a5:0c:d1:21:46:26:32:d2:de:d3:68:3c:c1:00:
99:a7:46:ff:37:ce:a7:21:92:49:50:3f:a3:4b:4e:
1f:44:a4:68:df:3a:de:cb:cc:02:0f:2e:22:b9:1e:
c5:c7:14:ce:50:21:59:6a:82:d6:9a:2d:97:76:95:
71:2f:e5:60:c1:e6:fa:70:e5:5b:08:4e:10:a2:e9:
3b:2c:06:29:4b:45:1b:2c:37:d5:ed:29:ce:70:55:
01:24:9d:38:1a:01:35:99:6b:b9:f5:18:d4:1a:6c:
49:05:35:da:7f:ac:b3:52:e1:01:54:b7:4f:1c:02:
98:3a:7e:0c:4a:0b:97:09:6a:d7:53:17:c5:42:6c:
df:38:85:57:7a:90:b2:c3:06:74:32:b4:87:ab:eb:
4f:8e:3f:64:fa:ba:9c:b7:25:20:09:84:ee:f9:28:
6d:6d:b9:31:e2:32:d1:4a:3c:da:92:87:9e:08:8f:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:61:02:66:B8:51:F5:96:69:28:3D:A2:D6:B0:9D:BC:E4:50:CB
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:c8:ff:92:c7:e2:9e:f2:ca:06:2a:82:84:81:35:95:35:
99:a7:75:c7:11:00:d8:3f:99:f5:8c:f9:19:20:d0:21:90:78:
0c:17:ff:eb:da:e5:af:0e:d0:aa:88:28:8e:2b:2b:ce:37:d6:
a9:51:52:80:e7:e7:58:bc:b9:50:9d:bc:88:27:05:b2:a8:a6:
ab:19:c3:5f:42:db:b8:99:a4:66:4b:dd:88:22:a7:b1:b5:7e:
cd:b1:f9:ad:d2:dd:0e:3a:09:3c:4a:37:3d:13:2c:ce:ff:8f:
a9:cc:46:20:e5:7e:63:11:51:60:8f:a9:1c:5b:7e:3c:d7:97:
49:a3:b7:10:85:12:cc:6a:86:bc:13:16:ac:26:52:0b:d8:a5:
88:28:81:aa:ff:70:45:93:d9:26:56:e0:03:8c:40:77:25:e2:
b9:6d:39:23:88:3f:e8:bb:1c:b3:ea:35:d6:aa:9a:12:c9:ad:
0c:e7:8a:95:02:87:bf:27:ba:7e:9b:50:26:10:76:45:48:10:
d2:40:38:49:97:cf:94:ee:c7:07:eb:b7:85:bc:56:d8:81:43:
90:0e:44:23:90:3e:a3:b7:d7:6c:aa:88:02:c5:07:f1:b0:28:
bb:fc:2c:1c:55:a1:2c:7d:cd:b2:eb:b7:db:d5:ad:8f:7a:40:
0e:e7:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:55 2025 by rpki-client