Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: eecg3pa3GzrJQuQTQB/6sIdyEhy/f5/yS46IWRurgJs=
Subject key identifier: DF:A9:79:6C:E1:58:C1:0E:59:CD:EE:C2:77:EA:56:97:78:AB:B6:DE
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01984D78ED4FE78A0FA97D2E2FD723EA7F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 20:00:27 +0000
Manifest this update: Sun 27 Jul 2025 20:00:27 +0000
Manifest next update: Mon 28 Jul 2025 20:00:27 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: +smV8rJBhByhhkrhYgNWczp2oUIkOSgfPBKQMFJw4BE=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:78:ed:4f:e7:8a:0f:a9:7d:2e:2f:d7:23:ea:7f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jul 27 20:00:27 2025 GMT
Not After : Jul 28 20:00:27 2025 GMT
Subject: CN=dfa9796ce158c10e59cdeec277ea569778abb6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ab:2b:0d:83:dd:d3:e1:75:f8:87:91:16:fc:
7e:4a:3c:da:66:88:c6:45:6d:36:54:c5:21:89:c0:
c8:c2:d7:45:5f:48:d3:6d:e0:da:23:d2:6d:cf:b1:
81:34:70:13:5b:13:03:55:5c:19:9a:2d:7f:bd:66:
91:7a:51:79:f7:8b:cb:70:ca:31:44:d4:bc:eb:a2:
1c:a0:8d:c1:96:ab:77:50:d6:89:b8:0f:a8:50:08:
ab:2e:86:6d:bd:e6:b2:ed:c0:3e:3f:d8:af:27:90:
6f:9e:23:c6:47:a0:56:3a:45:b9:cd:29:16:51:87:
50:30:e7:66:b4:d5:51:80:4b:59:82:ba:e1:91:83:
af:29:76:66:27:6b:89:a8:c0:ea:8a:05:53:16:aa:
80:91:7d:55:98:cd:59:4b:ef:e6:17:6d:21:2d:4b:
11:2d:56:d5:c5:43:bd:8e:0d:bf:83:44:79:03:7a:
3e:51:ba:75:1d:1e:f5:7c:9d:b1:66:9d:04:78:97:
c6:37:33:e0:be:a2:45:a9:5c:6a:49:68:c0:75:7f:
cf:c4:17:85:a2:78:93:40:37:49:8f:c9:04:83:72:
be:5d:8e:f0:44:06:9a:06:cf:ba:42:c9:73:a3:37:
8c:67:83:e1:9a:f1:06:4f:22:ee:e5:d2:90:05:6e:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:79:6C:E1:58:C1:0E:59:CD:EE:C2:77:EA:56:97:78:AB:B6:DE
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:3e:a2:96:d0:60:dc:96:1c:a3:72:ef:1a:b0:bc:ed:37:
00:d8:7a:55:18:05:56:34:ac:2f:88:8c:28:58:e6:23:49:10:
cd:a9:a2:96:80:d1:0a:be:b2:6d:1f:a1:14:c0:58:2e:15:33:
17:04:c2:0c:69:42:78:d2:95:37:19:8f:7f:c3:8a:fb:30:7c:
c5:b7:cb:14:9f:5f:52:ab:f4:39:16:7e:6f:6f:45:2d:ed:fa:
a0:e0:0c:a4:7d:c0:a1:d1:ed:90:31:ab:5e:db:52:ff:d5:aa:
eb:46:7e:e4:1b:c2:42:10:47:6a:0a:e1:2b:63:e5:9c:16:44:
e5:c5:86:74:f7:86:36:70:ea:78:9b:b3:5a:ff:45:cc:0f:1a:
dc:5d:22:e9:7e:82:65:d9:bf:b4:35:2e:7a:53:c5:88:44:c1:
4e:d2:08:4e:3d:3f:46:ad:66:02:02:0e:30:dc:2e:1f:0b:76:
8c:1e:5d:99:d3:f3:da:42:c4:26:78:4e:42:4e:43:65:77:16:
74:e4:0f:75:96:2f:18:67:33:6e:27:3b:24:fe:9c:b7:26:d0:
5d:67:19:0f:6d:e1:b7:47:e9:94:b5:79:87:b8:ec:e1:8d:26:
12:d1:07:88:d5:6d:43:8d:00:bf:e0:89:57:66:9e:8c:3e:13:
71:b8:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:00:24 2025 by rpki-client