Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: aS6QTVyuQq/R0I6FQxZ3FhBz55wFQ0Su/bZuBjeoEfc=
Subject key identifier: C2:A3:04:E8:D6:DF:A9:48:02:CA:09:E6:36:4E:33:60:B2:DC:0D:D8
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 01984AAEC570CCF121ACB2948AE662ECE665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0BC9
Signing time: Sun 27 Jul 2025 07:00:24 +0000
Manifest this update: Sun 27 Jul 2025 07:00:24 +0000
Manifest next update: Mon 28 Jul 2025 07:00:24 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=)
3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: D9M8XO/hzbVilFYxie2RqH9LtrJZZh4isFzkvg6NTXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c5:70:cc:f1:21:ac:b2:94:8a:e6:62:ec:e6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Jul 27 07:00:24 2025 GMT
Not After : Jul 28 07:00:24 2025 GMT
Subject: CN=c2a304e8d6dfa94802ca09e6364e3360b2dc0dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:e0:52:5d:9a:bf:13:8e:66:21:82:ce:0a:
94:45:27:aa:63:4e:5d:7e:a0:a5:30:aa:81:da:be:
4c:63:d8:0b:28:e2:a0:89:fb:a9:96:4c:f5:09:48:
9a:80:54:98:e1:88:c4:d1:09:23:0c:e3:c9:5c:6b:
6d:01:a6:f5:cf:78:70:1a:28:5e:06:0b:07:9c:6a:
d7:94:4d:be:41:d2:a3:c6:9a:c3:ff:4c:8e:5b:bf:
3e:52:45:32:cb:da:ab:2a:5d:40:0b:68:6a:fd:d7:
49:72:52:65:e0:d0:58:64:7d:96:43:c6:25:53:78:
f3:7b:28:c2:18:f7:6c:3f:b2:02:b8:d6:d3:19:84:
41:3a:83:28:47:3a:27:01:f6:24:22:fe:8e:b5:cb:
22:de:3a:e4:b7:b8:93:6c:e8:dd:c4:b6:51:90:ab:
12:4e:2a:79:54:30:e9:91:54:d1:f5:89:16:03:d0:
67:fa:c6:53:58:38:17:a3:44:a8:22:3a:1c:f4:78:
48:ab:a1:41:0b:84:3d:5e:40:fb:fe:ab:58:9d:c5:
3e:2e:3f:88:46:d8:6d:33:af:81:1c:3f:b4:16:93:
b8:6e:db:af:ff:d5:e5:e6:0c:64:12:c8:46:07:68:
07:37:e8:31:22:1f:42:96:b9:d2:96:fe:c3:f6:bc:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:04:E8:D6:DF:A9:48:02:CA:09:E6:36:4E:33:60:B2:DC:0D:D8
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:60:ea:67:49:0d:ad:04:a5:a9:99:e7:be:dc:6c:6f:fe:
72:11:c5:f4:6b:5a:c1:41:0b:cd:fc:9d:76:4b:ce:5f:25:39:
63:f3:ef:aa:04:d2:8d:8e:98:6f:26:5e:a2:83:80:0d:c7:63:
97:26:6c:3b:25:3a:f7:24:50:47:21:7f:26:8c:e8:8b:8c:85:
34:fa:7f:e2:97:91:da:36:d7:2b:f7:4a:0b:26:3b:32:88:8e:
26:4d:d6:63:64:4d:aa:be:98:be:06:f2:f2:45:75:45:7e:1a:
81:22:4b:8e:ce:3d:d8:97:13:9d:bb:85:a9:14:ae:f9:2e:36:
7e:c8:0d:8c:bb:71:ac:6a:15:9e:dc:85:96:2e:85:30:7c:d8:
6c:16:22:3c:16:34:b7:ce:63:46:ef:aa:f1:16:2e:5c:0c:98:
23:de:23:20:16:46:e2:24:48:63:37:48:e7:89:cf:f3:88:94:
e1:c5:e3:a1:d4:b8:c9:7a:33:4b:9e:bc:d0:65:9a:09:3a:1e:
90:8a:aa:e6:3a:6e:26:4f:c9:cc:66:46:02:89:09:fc:5a:a7:
de:d1:7f:98:28:50:a3:88:91:b6:7d:b9:5c:6a:a1:b9:08:3e:
14:12:6f:f6:45:42:2c:1a:d4:41:a8:1f:f6:3f:1a:ec:03:e9:
4c:fb:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:02:27 2025 by rpki-client