Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: OwB1TvbBh/aihBc8HkPKKsf1s1vqMGlThqIMS+tYIZQ=
Subject key identifier: BB:2C:B1:F4:CC:4E:3B:B3:08:99:8B:C7:D7:4C:D8:95:77:70:57:62
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 01984B5471B715378C261D6E1B6FD74969D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0CEB
Signing time: Sun 27 Jul 2025 10:01:21 +0000
Manifest this update: Sun 27 Jul 2025 10:01:21 +0000
Manifest next update: Mon 28 Jul 2025 10:01:21 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: c5RzQlaXgASCEhF9EfmgHGXN4pQCoHu307jHczzNffA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:71:b7:15:37:8c:26:1d:6e:1b:6f:d7:49:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Jul 27 10:01:21 2025 GMT
Not After : Jul 28 10:01:21 2025 GMT
Subject: CN=bb2cb1f4cc4e3bb308998bc7d74cd89577705762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:cd:89:29:52:61:95:d5:ea:57:7b:66:d0:
e9:8e:81:24:68:98:a2:1b:36:49:c6:f2:47:77:2d:
64:84:e1:f2:ec:8b:06:1e:2d:55:50:22:3f:f9:9b:
51:25:43:57:c0:12:fe:72:a8:60:cd:3d:3d:31:20:
39:77:df:ac:7a:11:46:19:ce:9f:01:19:b4:d2:23:
ad:f8:35:b8:e5:06:28:f3:12:bf:94:73:4b:68:66:
ed:06:25:38:9f:7b:be:cd:4e:c8:62:53:1c:2f:e1:
27:05:4d:16:e2:95:4d:a7:49:90:15:7a:e1:9e:d8:
e1:5c:6b:78:2d:55:1c:27:63:91:8c:5a:c7:e2:16:
29:b5:c2:1e:fc:92:c8:fd:dc:59:2e:0f:17:36:33:
2d:fb:19:f6:d0:e3:4e:72:9d:7e:bb:d7:5a:76:f5:
ba:23:49:00:51:a0:42:67:48:97:2e:bb:b5:f6:a9:
5e:25:cb:62:aa:f0:c2:4c:1e:15:8a:55:7d:c6:f6:
13:a1:6f:1f:77:6e:93:58:80:20:d0:73:1a:80:35:
9b:15:11:7f:d1:c1:d7:d0:45:16:4f:e7:77:cc:95:
d1:c7:6c:fc:6c:eb:bf:7c:55:ba:0d:58:cf:7b:12:
6d:91:b1:c3:58:db:98:f8:de:96:61:00:58:6d:9a:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:B1:F4:CC:4E:3B:B3:08:99:8B:C7:D7:4C:D8:95:77:70:57:62
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:2c:81:e9:3a:e5:7b:1e:48:87:86:62:fe:da:47:a5:62:
bb:fa:13:b8:0f:10:86:da:bd:7e:5f:e6:b1:16:b6:11:99:df:
a7:7f:2c:62:20:fa:e9:b1:df:b9:b0:28:e8:ec:49:14:59:5b:
56:e9:0d:c1:de:d1:a4:36:cc:0e:5a:27:ec:0e:29:ab:16:25:
b1:8c:21:ab:d9:7c:23:a4:f4:88:ae:b8:07:00:d1:6b:77:f1:
59:6b:81:ce:a3:15:fa:09:66:21:f0:09:7c:75:19:13:41:db:
da:54:b2:f1:b4:f9:fb:a0:ba:05:8f:91:04:f7:fe:71:d4:7a:
77:50:fb:ef:ef:14:d5:26:7e:00:a4:0f:36:da:5e:b8:13:f1:
57:6d:74:54:f2:d4:ed:ac:01:3f:1a:57:24:72:9e:74:41:ca:
5c:d5:96:72:8b:1c:22:88:9e:a8:ba:cf:87:09:b0:67:0e:3e:
8f:af:15:f7:33:85:e0:c6:5b:46:81:6f:95:21:c1:75:8b:81:
db:96:03:9d:2d:d2:a3:c0:2c:00:58:ca:38:2c:cf:88:44:75:
b8:cd:96:57:dd:be:ca:9a:f0:da:23:9e:b2:3d:c7:bd:e9:d2:
09:e3:8d:b8:d9:05:f4:1d:b0:80:a2:3d:f4:31:ed:ef:33:8e:
bc:6e:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:03 2025 by rpki-client