Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: nXKVwVW4gHKzneU7vyo5UvJ3esTkai54+Ay4jeSR7H4=
Subject key identifier: D7:6B:BB:FB:93:5E:B5:28:35:73:BC:DF:34:83:81:41:FE:EF:38:68
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 01984966D032E74C848B19F8A5449E57AD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: TH0H7pjqX1eifkHMrQHLfCL1gQlMZzZuYJHYY3gkxZg=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:d0:32:e7:4c:84:8b:19:f8:a5:44:9e:57:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=d76bbbfb935eb5283573bcdf34838141feef3868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:87:b0:14:79:f8:68:bf:93:cc:26:ea:ce:
df:4b:8e:45:e0:79:50:8f:0b:c4:87:07:4e:b1:cf:
9b:1f:c9:e8:b5:52:8b:5c:4f:0d:51:b2:0e:f2:52:
3e:8f:e4:d0:fb:23:ee:34:7a:6a:46:07:dd:e2:44:
c5:bc:a3:9b:c0:51:3e:f6:b8:78:1d:c7:61:f7:17:
0f:98:66:33:76:95:fa:da:71:30:bc:b7:1b:9b:5c:
48:b3:0d:1e:41:f4:4e:a6:f1:66:d7:55:3f:b2:70:
ee:a1:43:cb:52:19:50:e4:6c:62:41:9f:68:a5:bb:
ae:53:09:78:42:ae:a9:86:d1:29:00:73:30:71:ba:
75:a9:02:9d:a3:a0:3c:67:81:8c:4f:88:45:f9:4a:
86:ee:a8:0d:dd:3a:da:f4:ab:f3:37:e2:ed:0e:2b:
08:01:d2:94:5f:f8:4e:ce:7f:b7:d0:a4:d8:e6:33:
38:2a:fd:ea:9a:38:13:87:7f:4e:86:80:86:a2:c9:
e2:d3:90:cd:df:28:3f:3e:ad:69:2e:2e:9c:6a:f1:
45:cb:76:f0:74:2b:39:5b:29:02:27:ca:9b:25:cb:
1e:fa:72:ae:38:8c:ad:60:1e:00:a2:7e:e1:ee:7a:
d0:62:06:41:f3:ff:99:dc:a9:f8:9f:3a:ad:31:f8:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:BB:FB:93:5E:B5:28:35:73:BC:DF:34:83:81:41:FE:EF:38:68
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:82:ea:32:3d:c2:aa:c0:d6:0c:e8:3e:5a:ba:45:d6:e5:
f9:cf:ed:8c:f1:2b:60:1b:d0:fc:98:70:d0:b3:d5:fb:7c:b8:
bb:aa:78:60:2f:9e:b6:e2:c4:d1:3c:c8:5d:a0:12:3b:26:b0:
7b:c7:02:14:6b:96:61:3e:45:be:d1:dc:94:87:4d:99:72:09:
ac:28:e8:ea:37:e7:9d:b7:84:58:a2:79:f3:16:50:77:5f:0a:
cc:dc:c0:ac:18:f8:ea:a3:61:d1:2b:1b:6d:36:2a:c6:fd:70:
cc:93:02:91:0d:3a:93:45:09:d4:b8:33:c8:63:e9:9b:07:53:
7d:01:48:5a:22:73:ec:97:bd:3d:39:a7:84:4c:01:70:60:78:
6b:bc:e4:f9:15:a1:e0:cb:a7:13:ab:a6:a1:30:5c:d8:0a:41:
3a:c5:68:d5:9f:4e:aa:f8:16:79:75:89:d4:58:96:61:56:3d:
99:0e:9e:5d:cf:79:3f:fa:bb:ae:70:e5:97:7b:41:39:31:ba:
30:fa:7b:35:cc:fd:23:9f:f1:92:30:53:9b:01:7e:4f:dc:cd:
42:a4:95:05:1e:d7:d9:9e:8a:a0:bd:8e:71:2e:50:20:ac:03:
d5:30:93:a9:d7:a6:f7:76:1b:08:9b:67:15:76:b3:a6:e8:a9:
3f:f1:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:26 2025 by rpki-client