Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: RsZD929Ip6k0v300GCsx622V8viKmDod0wkUofZYn90=
Subject key identifier: DF:90:6E:BD:7C:89:A3:D8:07:59:4B:8C:FE:D1:D7:3F:49:DA:B4:1B
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 01984965FA49D065489ACF1E0FAEFF934854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:16 +0000
Manifest this update: Sun 27 Jul 2025 01:01:16 +0000
Manifest next update: Mon 28 Jul 2025 01:01:16 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: 8D89e+QaQNegcNQNnQk0p4Nig9+Km/CgSDjMg5RkLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:fa:49:d0:65:48:9a:cf:1e:0f:ae:ff:93:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Jul 27 01:01:16 2025 GMT
Not After : Jul 28 01:01:16 2025 GMT
Subject: CN=df906ebd7c89a3d807594b8cfed1d73f49dab41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:0e:f5:a8:ab:65:e6:e4:ba:54:6b:f8:35:
a2:31:de:1f:4a:ab:51:67:4f:aa:e5:83:51:f3:b3:
af:5a:fd:05:56:a7:e0:21:db:5c:6e:a8:95:62:17:
1e:85:dc:95:23:70:cc:a4:cf:57:ce:3f:b8:28:30:
a9:a1:4b:6a:c9:46:d7:40:52:59:e4:5f:a0:73:ce:
97:c2:35:0d:17:ed:4d:2a:1d:a3:2a:4d:6b:77:50:
06:0a:de:ad:c8:b0:29:41:90:a2:a6:f2:77:ed:83:
17:5b:63:38:1b:74:6d:cb:30:0f:94:b4:69:f6:4e:
1b:dd:15:ea:16:a3:f6:d4:a7:e1:64:15:73:46:05:
b2:d1:56:76:66:cd:5c:aa:e3:88:ad:94:b4:1f:57:
58:bf:fd:fb:7a:f7:30:15:ea:38:c4:81:22:f3:93:
91:4a:91:20:7e:b5:c1:ba:04:64:6c:3a:c5:d3:5e:
41:15:5e:19:ee:15:98:3e:3e:90:fa:7e:de:aa:ea:
b5:55:e6:31:d4:c6:91:24:7b:95:95:0e:77:22:2a:
4d:17:4e:b6:d9:2a:e2:5a:08:80:11:d3:80:d0:b2:
b1:97:ff:38:a6:70:bd:93:e9:e3:33:51:58:90:75:
74:b1:5b:e4:95:7c:eb:be:49:47:e9:ac:cc:b1:6f:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:6E:BD:7C:89:A3:D8:07:59:4B:8C:FE:D1:D7:3F:49:DA:B4:1B
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:45:86:97:9e:9f:7e:af:eb:3f:25:bb:ae:06:7b:a9:be:03:
af:a3:94:41:4c:e0:39:a8:36:b4:0b:44:fd:10:3d:2e:1c:0b:
44:20:e2:a3:07:d7:5e:8e:fa:e9:41:77:a8:bf:f6:a9:d5:31:
35:db:c5:64:45:a9:10:d6:5f:45:cd:c3:24:16:32:d6:84:56:
73:8c:19:20:35:b7:28:49:59:3d:34:5e:81:6d:d3:c6:1b:fd:
37:78:e4:37:bc:6a:bf:17:48:a5:c4:bd:e7:78:4d:c9:6d:93:
bc:ec:e8:87:49:2f:cb:29:51:36:9b:da:a3:fa:d8:4f:c1:f6:
6f:fe:dd:71:47:e8:b1:32:25:86:49:cd:46:17:38:0c:75:96:
c8:10:20:d5:c3:b2:b8:51:9e:85:b1:09:5c:e0:a6:8a:13:70:
d5:3a:04:4a:e8:4c:87:a9:09:eb:68:88:1d:63:3b:69:a8:7a:
68:43:5c:4f:ca:28:f1:f6:cf:fa:c0:97:70:5e:2a:40:1c:1d:
4e:2f:41:f1:ae:00:17:ad:02:82:d0:26:69:8e:80:a1:4c:01:
39:d6:2b:27:30:00:c5:3c:a7:b2:05:9e:83:fd:08:4b:ba:17:
32:9b:d2:d1:b0:f1:d4:3d:35:99:d1:cf:fa:3d:c6:eb:22:2d:
36:8f:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:16 2025 by rpki-client