Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: AK3H//6VeqX4XLyv27OS32Oy4jcrU9lVs/Dd7jsJMHU=
Subject key identifier: CC:EE:13:96:FC:E5:A1:35:D7:2E:1E:AC:A2:9B:CE:7A:B5:25:B2:9A
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 01984777E4CFBE6BDDD90E9318CAB445F3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:36 +0000
Manifest this update: Sat 26 Jul 2025 16:01:36 +0000
Manifest next update: Sun 27 Jul 2025 16:01:36 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: r2LY7b9svCV/7UAcdjUwe87OZyt6NNWpuvLqV8vwRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:e4:cf:be:6b:dd:d9:0e:93:18:ca:b4:45:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jul 26 16:01:36 2025 GMT
Not After : Jul 27 16:01:36 2025 GMT
Subject: CN=ccee1396fce5a135d72e1eaca29bce7ab525b29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:c5:48:cb:8b:d1:5a:e5:15:70:c4:a8:de:
d4:d2:fb:a9:ad:09:58:b3:9c:5e:4d:c9:18:36:5a:
bd:e4:f4:c6:63:38:43:e1:99:9a:c3:4c:22:59:a9:
86:16:dc:51:f8:8a:82:1e:e1:b2:d3:7e:cb:c6:b7:
a3:08:39:7f:f1:7b:98:bf:34:4a:21:15:de:8f:2e:
7e:da:48:bc:14:f3:fa:83:6e:f2:cf:b6:7c:91:77:
fd:54:70:72:b1:95:9e:c3:6e:bb:1d:7a:50:02:ba:
d1:e0:c7:64:9f:b5:c7:e2:f6:55:90:ec:10:52:c4:
5b:80:cd:41:25:48:74:27:76:f3:4b:5f:5f:c2:35:
45:ee:32:5d:2e:77:31:16:77:55:63:7c:b9:f7:08:
7b:d0:7c:b2:f6:2b:94:8b:c1:ed:3f:f0:e2:63:ae:
96:4b:ed:04:e1:82:eb:2e:5e:ed:06:d0:49:5e:6b:
c3:0c:8b:20:08:0c:86:3f:89:99:b8:88:c5:ed:a3:
5b:3e:d9:70:93:7f:c3:f9:26:5d:e1:9c:1e:a1:72:
de:6c:94:dc:2b:3e:3e:ea:a4:fc:da:a5:98:61:45:
8c:65:5a:74:af:fe:00:64:b9:bc:b0:00:6d:b0:45:
4c:d9:51:50:cf:5d:39:41:78:64:75:67:cc:be:c2:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:13:96:FC:E5:A1:35:D7:2E:1E:AC:A2:9B:CE:7A:B5:25:B2:9A
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:fd:2d:52:44:dc:92:6d:0e:fa:f7:cd:4a:6a:fb:9a:41:
5b:6a:a3:24:c8:75:4e:f9:4c:0a:16:4c:97:1e:dd:58:36:8f:
83:21:f6:2a:e8:75:4b:27:07:5d:95:eb:10:b9:10:77:e8:71:
3e:ee:ff:a6:78:2c:01:33:7a:09:51:58:4d:a0:a2:d9:3a:8e:
c3:3f:da:9d:dc:7c:06:a0:75:36:b2:a1:96:ac:8a:bc:d7:75:
02:09:36:23:51:12:96:ae:98:f3:c2:63:e5:97:00:65:99:85:
14:5b:14:70:0d:fd:6f:f3:ea:34:50:e4:74:c3:bb:75:44:bc:
87:65:59:51:c3:aa:0c:1b:fb:bd:dd:96:3c:c7:5e:23:af:ed:
a2:6f:07:e8:d8:aa:fa:78:7c:a7:02:47:a6:d1:5a:4b:62:cd:
72:ff:e5:a2:b5:74:84:9f:cb:7a:1b:f9:84:8c:1e:e3:56:d8:
8a:db:27:bb:1d:3c:02:46:aa:6e:d2:08:b4:67:0d:09:e5:44:
c3:a2:80:ff:66:c7:07:20:32:4b:1e:48:5b:a5:11:83:c0:4b:
a5:50:d9:5c:e5:ca:4e:76:61:9a:5e:dc:fc:55:a7:34:a9:80:
d6:cc:d5:dc:47:16:fc:65:92:8b:1b:77:d6:82:5a:43:69:39:
fb:10:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:42 2025 by rpki-client