Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: VdIbCRCYZlrPkpwokxZJgI4KJJmbM65H8F0ttIbVW+4=
Subject key identifier: 64:F2:C4:50:3A:DF:6B:3C:A4:38:F5:5B:3B:6C:F8:99:FC:BD:10:00
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 01985344103CA118AAB961B5ED28516059DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 23:00:26 +0000
Manifest this update: Mon 28 Jul 2025 23:00:26 +0000
Manifest next update: Tue 29 Jul 2025 23:00:26 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: vfOR+9JxqkBfBlyK/CwdRvlabT0KQpX5vtw7mLUMCtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:10:3c:a1:18:aa:b9:61:b5:ed:28:51:60:59:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Jul 28 23:00:26 2025 GMT
Not After : Jul 29 23:00:26 2025 GMT
Subject: CN=64f2c4503adf6b3ca438f55b3b6cf899fcbd1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:d7:7b:67:4a:c7:71:9c:dd:8f:5a:f9:36:
90:18:e3:1a:f4:a3:4b:bb:ef:a8:df:61:ab:7c:ab:
32:fa:ab:ed:af:f2:33:c5:6a:18:b3:7f:10:11:55:
06:72:3d:52:d2:4e:93:51:6f:d7:a8:a8:eb:85:8d:
32:6e:0f:45:4f:1e:9a:56:67:5a:ab:7b:bc:c9:eb:
5e:43:f5:a1:ed:f4:1c:27:b2:e3:c9:eb:a0:59:35:
da:27:58:57:ac:c9:89:4b:07:1f:b3:dc:41:f4:88:
b9:22:bb:03:8e:60:17:3c:6b:37:db:9e:0a:76:ae:
86:22:13:47:fe:11:cd:13:ff:d3:fe:65:04:cd:4c:
29:1a:a4:59:45:a1:eb:6a:69:d5:0f:98:dc:ac:87:
f5:32:1b:40:b0:fc:fb:12:8c:11:6c:63:4c:bf:3c:
65:4c:f7:c6:a6:77:de:28:02:23:c6:a0:f5:95:02:
2b:cd:37:2a:e6:da:c6:f4:a8:62:e8:a2:cf:a4:c8:
28:a7:09:f0:f1:57:95:29:1a:b3:f4:e6:bc:41:b7:
f4:14:6f:b6:b5:e5:7a:3b:52:d3:c4:72:7f:e7:e8:
65:a9:09:27:5a:2f:7d:a7:1f:8e:81:b3:ae:fc:c2:
92:0f:42:8f:e2:44:d8:88:3d:d3:71:81:1a:15:1e:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:C4:50:3A:DF:6B:3C:A4:38:F5:5B:3B:6C:F8:99:FC:BD:10:00
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:6b:61:f6:9a:ee:f4:56:36:f3:e8:54:20:07:f6:9c:b8:
95:44:81:d9:a6:90:c8:ba:5c:45:f1:97:38:43:f1:a7:16:29:
8e:4a:da:5f:a5:14:9d:07:a0:de:87:4e:73:4f:0c:97:51:7b:
17:c0:4d:b8:96:72:d0:ec:f9:75:ea:38:52:09:db:b8:6a:05:
b0:74:e3:39:b7:1d:ec:ab:96:84:f3:4e:3f:67:5a:0a:31:62:
a0:69:21:b0:84:96:ff:67:a4:30:b8:66:24:8c:71:08:c8:a4:
cd:25:30:d2:ff:5a:d9:4e:86:7a:ba:9d:65:d0:d7:b3:9e:d0:
42:15:a4:f2:a4:d1:23:68:ad:27:4f:ca:fb:c1:2e:b5:2c:be:
20:98:0c:da:e6:cf:29:50:00:17:c2:d8:e5:04:a0:de:b1:59:
6a:dc:dd:79:14:a2:f2:b7:22:8a:91:e0:da:29:ed:96:69:58:
4f:03:03:b0:7c:07:43:62:b6:13:ab:5f:1c:b2:e2:14:c8:2b:
09:94:32:e2:fd:2f:8d:a6:7d:5d:ab:7f:cf:a2:bc:15:60:f3:
8a:e9:01:e9:8a:cf:9e:4a:a7:f8:ad:f0:29:81:40:f0:02:7e:
fb:f2:99:4c:5b:15:b6:64:45:d2:dc:9a:18:8b:e1:99:c9:a7:
6c:34:f8:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRBA8oRiquWG17ShRYFndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj
MWVkYjgwHhcNMjUwNzI4MjMwMDI2WhcNMjUwNzI5MjMwMDI2WjAzMTEwLwYDVQQD
Eyg2NGYyYzQ1MDNhZGY2YjNjYTQzOGY1NWIzYjZjZjg5OWZjYmQxMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3Xe2dKx3Gc3Y9a+TaQGOMa9KNL
u++o32GrfKsy+qvtr/IzxWoYs38QEVUGcj1S0k6TUW/XqKjrhY0ybg9FTx6aVmda
q3u8yeteQ/Wh7fQcJ7LjyeugWTXaJ1hXrMmJSwcfs9xB9Ii5IrsDjmAXPGs3254K
dq6GIhNH/hHNE//T/mUEzUwpGqRZRaHramnVD5jcrIf1MhtAsPz7EowRbGNMvzxl
TPfGpnfeKAIjxqD1lQIrzTcq5trG9Khi6KLPpMgopwnw8VeVKRqz9Oa8Qbf0FG+2
teV6O1LTxHJ/5+hlqQknWi99px+OgbOu/MKSD0KP4kTYiD3TcYEaFR5JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTyxFA632s8pDj1Wzts+Jn8vRAAMB8GA1UdIwQY
MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt
NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5
LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChZrYfaa
7vRWNvPoVCAH9py4lUSB2aaQyLpcRfGXOEPxpxYpjkraX6UUnQeg3odOc08Ml1F7
F8BNuJZy0Oz5deo4UgnbuGoFsHTjObcd7KuWhPNOP2daCjFioGkhsISW/2ekMLhm
JIxxCMikzSUw0v9a2U6GerqdZdDXs57QQhWk8qTRI2itJ0/K+8EutSy+IJgM2ubP
KVAAF8LY5QSg3rFZatzdeRSi8rciipHg2intlmlYTwMDsHwHQ2K2E6tfHLLiFMgr
CZQy4v0vjaZ9Xat/z6K8FWDziukB6YrPnkqn+K3wKYFA8AJ++/KZTFsVtmRF0tya
GIvhmcmnbDT47A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:16 2025 by rpki-client