Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
File: dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft (raw, json)
Hash identifier: bXNtqboeG3CCA1XG/1nMPWeJ1OqQ7cqc03E0Kj7vNgs=
Subject key identifier: 89:0F:CF:CD:D8:AC:6F:9C:A7:F0:82:FF:5D:DC:89:C9:D1:97:F0:37
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 01984A780B4B31CCD6A2A1C4D7C9AA7D30C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
Manifest number: 134C
Signing time: Sun 27 Jul 2025 06:00:37 +0000
Manifest this update: Sun 27 Jul 2025 06:00:37 +0000
Manifest next update: Mon 28 Jul 2025 06:00:37 +0000
Files and hashes: 1: P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa (hash: 3hJsA3Q3EQecJR3hJHgLTYYEIcnWflx0DcKeSfNvhRM=)
2: dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl (hash: BkncSXPTCDtSoxhzBsBmmPCcJQL9wWyV1k6R0vIWDrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:0b:4b:31:cc:d6:a2:a1:c4:d7:c9:aa:7d:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Jul 27 06:00:37 2025 GMT
Not After : Jul 28 06:00:37 2025 GMT
Subject: CN=890fcfcdd8ac6f9ca7f082ff5ddc89c9d197f037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:19:ce:d4:b5:18:7c:d7:d9:52:f9:ff:c9:
63:4e:2a:e1:4f:db:25:8d:75:c3:61:3d:35:c1:2d:
52:8a:0f:41:8c:91:f5:17:38:96:3d:dc:9e:07:8f:
85:7a:fe:44:b0:ba:4f:ea:12:27:57:8b:b3:bd:c3:
e6:df:9c:ed:e9:92:19:87:37:cd:93:27:81:bb:2b:
44:47:45:da:b6:25:3c:6d:eb:76:4f:7a:9a:49:10:
38:e7:9d:41:f2:57:a3:34:a8:30:3f:a9:45:b2:b4:
b0:7a:e1:43:89:64:59:b8:b8:23:e8:d9:9e:c2:a8:
22:c5:b8:cb:3d:39:bb:dc:25:de:4c:f8:93:3d:ca:
59:95:a1:04:70:be:6a:b7:8b:29:79:78:f6:d7:59:
56:a8:5f:49:77:b8:59:5b:61:a8:ff:96:f0:93:99:
e4:b0:30:3a:44:29:09:92:1a:68:33:c7:fe:75:de:
7f:d8:91:e5:98:b6:90:e0:8b:72:f3:88:ee:8d:a5:
32:bd:43:9f:ca:67:b8:27:8d:4d:84:a2:a3:54:d9:
51:a6:32:f7:e1:af:be:3b:1e:d4:4e:52:97:3d:5c:
b9:f9:a5:56:9e:6f:fd:4a:e1:4b:d1:ed:36:c2:a4:
e3:9c:8a:98:1f:81:3f:89:bf:30:5e:76:f5:b1:14:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:CF:CD:D8:AC:6F:9C:A7:F0:82:FF:5D:DC:89:C9:D1:97:F0:37
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:70:4d:a0:35:4c:ed:9a:74:59:ff:9c:e1:c5:aa:b5:b8:
b8:89:2a:17:7b:89:03:41:7a:a6:6d:8c:6b:77:01:b8:1e:c4:
a2:61:3c:4f:1f:63:1f:67:a7:c8:d5:6e:c3:77:92:86:1c:98:
5f:6c:28:1c:7c:d4:1d:93:7d:6a:8a:2c:63:76:99:e1:22:e1:
4d:a7:b5:9d:16:9e:f2:fc:4e:43:89:33:b7:14:34:6f:f2:75:
b5:0b:48:56:3d:be:29:b5:63:e9:84:d4:03:1d:29:06:89:37:
32:5a:7b:b7:d3:f9:b9:5e:ef:c1:df:19:fa:9b:68:8d:67:90:
bf:6e:ed:20:7a:b8:f0:02:8d:64:fd:ce:5f:58:a8:4f:a2:8a:
e5:7a:4b:93:89:05:8f:ad:8f:e9:b7:25:90:cf:f0:c9:1a:b8:
fb:4d:39:f1:ac:d0:23:ee:00:16:d6:64:92:d9:de:70:4b:fe:
37:66:27:e9:bd:89:28:a5:cc:b4:c3:4a:4a:ec:43:77:db:f3:
4e:47:a7:94:e1:7c:eb:6f:b6:cc:39:a8:6d:16:a7:9b:09:bf:
ce:74:57:cf:db:ba:57:e9:f3:ef:be:7f:ad:af:24:5f:0e:99:
8c:a5:4c:3a:19:5d:21:af:54:65:fd:f1:7d:72:c6:98:41:9b:
f3:b0:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:18:14 2025 by rpki-client