Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: ZC9wsYXCVeC9568CZHflT6d1hs2zLxZDbeCgnonso0c=
Subject key identifier: B3:DC:DA:50:56:D1:5D:F1:07:25:C9:94:7F:5A:72:A8:D0:32:2B:40
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 019845898F5A6483002355E34D7234B3D03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0E65
Signing time: Sat 26 Jul 2025 07:01:39 +0000
Manifest this update: Sat 26 Jul 2025 07:01:39 +0000
Manifest next update: Sun 27 Jul 2025 07:01:39 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: mxrN0uGMMVqlo4/mbU+CWf8IS+YJtGfXsHI7NMZULF8=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:8f:5a:64:83:00:23:55:e3:4d:72:34:b3:d0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jul 26 07:01:39 2025 GMT
Not After : Jul 27 07:01:39 2025 GMT
Subject: CN=b3dcda5056d15df10725c9947f5a72a8d0322b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:ae:c6:42:e4:ed:2c:f4:28:4e:37:07:ae:
d1:18:7d:b5:2e:02:94:d7:9d:2e:d7:5b:4b:f7:8f:
ce:e8:43:13:1c:c5:fd:dd:c5:a3:53:5d:7d:e3:c4:
de:b7:5d:e9:24:c6:1b:e3:16:8b:93:b6:2c:d3:70:
f6:b8:95:9b:57:77:45:d2:41:9e:04:ad:87:a5:92:
e9:b8:1a:83:1a:f5:9c:c2:6f:26:26:52:d7:d8:82:
b2:11:67:ef:14:4d:52:6c:fa:58:bd:3f:e5:b2:e0:
54:bc:b8:e1:62:d9:f3:74:d2:59:a7:ad:c5:df:56:
e0:b0:8e:6d:b8:d7:6c:fa:46:50:4f:ec:bd:fd:cf:
b9:83:73:65:ce:68:af:27:56:f9:14:3c:02:ea:52:
80:7f:13:fb:f9:91:98:2f:02:f6:eb:b2:66:fb:10:
36:5a:35:f3:23:30:29:0a:bb:14:cb:56:23:3d:55:
46:a1:40:b5:81:83:e5:0d:d8:67:ee:4f:28:0d:d5:
f4:a1:45:19:b4:fe:ff:b6:bf:86:68:4f:1d:55:b0:
57:85:a2:b8:bf:11:df:67:fd:04:4f:a9:a1:d5:e7:
1d:65:a6:0c:00:c1:90:29:47:ec:91:03:cf:51:22:
3b:8d:2c:78:c4:04:ba:7c:b1:96:61:cb:c7:72:41:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:DA:50:56:D1:5D:F1:07:25:C9:94:7F:5A:72:A8:D0:32:2B:40
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0f:5c:18:3c:c4:6d:3a:c6:91:ae:8b:77:4a:84:cd:b4:c7:
8d:19:3c:5a:53:f6:df:ed:83:f3:20:2d:f0:c9:53:49:84:38:
9c:36:a9:44:e7:68:1d:ec:ff:9d:a7:3b:88:a9:11:8f:7b:5d:
ef:ac:62:ca:2c:08:8b:b8:5c:58:33:b6:90:07:9b:44:9e:fe:
5d:fa:6f:d4:5b:4e:46:7c:4c:7b:ca:73:37:d0:88:09:b1:c6:
b5:de:99:d4:87:a1:16:5c:77:de:29:3c:93:d9:94:3d:c4:2f:
21:bd:ad:b7:40:67:71:37:21:ff:e4:c9:9e:db:01:37:6a:b1:
db:af:f7:84:d2:56:ff:d8:75:37:0e:2b:85:38:a6:bb:49:aa:
dd:5e:81:32:27:0d:b2:e9:66:cc:87:dd:49:db:23:32:5c:42:
15:ba:16:1a:95:93:9e:29:fc:d8:ed:f3:b5:03:e1:40:8a:ff:
b1:2b:06:94:31:41:d6:c1:42:19:43:c1:7d:0e:0d:f8:06:bb:
b3:e9:42:63:2f:72:6e:9a:b4:7e:2d:00:37:92:3b:69:24:b8:
cb:84:64:70:83:89:51:81:77:d9:b3:9d:28:a3:71:a1:33:7e:
e1:80:3d:88:6d:6d:81:dc:0f:79:88:01:a0:75:af:20:e3:1a:
03:62:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:05:15 2025 by rpki-client