Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: RI5gy0F/2thNzWuRhvoEJ6xSur/DVWBLLlz2aHjbrSw=
Subject key identifier: 7F:58:69:D7:3F:E7:8C:6E:36:41:B5:9E:3C:29:40:B0:1C:62:B4:1C
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 01984776DA0E4E9B9454A651786D916CD07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0EB5
Signing time: Sat 26 Jul 2025 16:00:28 +0000
Manifest this update: Sat 26 Jul 2025 16:00:28 +0000
Manifest next update: Sun 27 Jul 2025 16:00:28 +0000
Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: ACa9DceHctEM2hne4fsqwcHLvYY1XWYXyapU+xackPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:da:0e:4e:9b:94:54:a6:51:78:6d:91:6c:d0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Jul 26 16:00:28 2025 GMT
Not After : Jul 27 16:00:28 2025 GMT
Subject: CN=7f5869d73fe78c6e3641b59e3c2940b01c62b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:75:d9:1b:a8:39:59:68:71:bd:f0:f3:5b:
d4:d3:59:f6:9f:d8:7b:3f:44:88:d3:b5:58:fc:d3:
f9:21:ba:69:14:ec:17:6a:9e:c9:eb:b7:d3:e7:05:
75:ba:ff:95:a4:f3:b7:53:86:cf:45:3d:09:93:be:
72:21:f2:f8:de:21:77:0c:d1:4f:da:14:cb:23:ce:
0c:5f:de:e6:3a:4b:c4:93:46:a8:c6:96:80:23:fe:
a4:cd:9e:d3:a0:f7:1b:6c:a9:88:8c:dc:cd:47:d3:
15:e5:43:d2:f8:1e:22:63:14:a4:b6:53:c0:26:d5:
b3:75:99:ea:6d:16:93:d6:5e:35:56:92:65:78:d9:
25:5f:4d:d8:2b:f8:59:d3:8b:6b:a1:35:a5:c1:3c:
71:66:a8:b0:b3:f8:d5:89:84:95:de:6b:4c:f1:59:
fa:b6:81:29:7d:a0:b5:b1:da:bd:47:6b:8d:1e:59:
2a:1c:f9:40:5b:ab:5b:df:3e:aa:2e:ff:be:2e:13:
48:15:c1:63:71:e1:51:cb:f3:ae:7f:29:c8:5c:21:
26:55:60:d5:71:17:02:4d:4a:35:be:06:a9:6b:f8:
06:98:da:4d:d0:ec:dd:13:74:bc:1f:f3:2e:93:e7:
81:a7:b5:74:de:01:24:c4:93:eb:d4:cb:7e:4a:66:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:69:D7:3F:E7:8C:6E:36:41:B5:9E:3C:29:40:B0:1C:62:B4:1C
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:ff:90:d5:61:a3:b7:9b:e4:6d:ca:a0:ab:d3:6e:0a:e4:
09:84:16:5c:7d:73:9d:db:d4:75:29:2f:3f:91:06:77:08:8b:
b4:86:30:fe:50:64:fb:df:ed:ff:54:98:dc:ba:15:24:91:0d:
50:0b:c9:25:41:c8:46:39:52:c2:a1:2f:95:76:13:ed:c9:83:
20:c2:99:06:18:a8:4e:60:c1:f8:e1:86:fe:4b:73:71:88:7c:
e6:92:2f:91:de:23:6b:0c:f1:02:9d:8b:94:03:69:22:b8:32:
df:24:96:a0:34:95:4d:ed:ba:ff:fd:23:9e:e3:79:e3:9a:8b:
98:04:f1:22:37:bf:ed:09:f4:64:c5:2d:64:6f:89:3f:d2:61:
0d:cb:db:69:8b:d9:b4:45:b4:7f:97:b9:af:b2:72:26:1f:80:
ac:be:15:7e:cf:60:73:2c:3b:c5:7e:ec:c6:b4:28:12:9b:84:
a4:16:31:ed:48:8a:7a:cb:92:ee:94:a2:36:dd:98:d6:77:70:
49:ae:de:d9:4c:1f:f9:04:d8:2e:17:13:76:0b:20:c0:c2:cf:
ec:5e:6e:70:21:ef:97:d1:23:38:fe:da:f5:d9:aa:44:43:be:
ac:5d:7d:34:1a:5f:67:f4:f3:27:d1:64:d6:40:16:88:bd:16:
53:e8:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:57:31 2025 by rpki-client