Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier: MmbEihy6w63DLmandRRTVe7O4nKwGXdCZbpUpYDNdbY=
Subject key identifier: 15:20:68:69:24:20:98:8C:2F:52:72:CE:C6:FB:3E:47:E6:F5:04:9C
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 01984A77A8A248257EE86CA03263D330BC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number: 0CD3
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: nDA8DV8QLFpUtE6VT2+tXaDyw6hOGOBcWViiNzRsY8M=)
2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a8:a2:48:25:7e:e8:6c:a0:32:63:d3:30:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=152068692420988c2f5272cec6fb3e47e6f5049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:13:b5:70:ee:6b:5c:05:30:ec:29:7f:d0:
72:8d:d2:2e:c2:fe:cb:17:76:c4:af:6f:7c:fb:59:
ae:45:27:39:6f:47:7c:87:81:64:02:62:b8:fa:05:
25:cb:b4:8d:72:f0:ae:bb:ac:6b:a1:b9:b7:90:4c:
ae:e2:c8:b0:25:60:80:08:cd:5a:6f:00:3c:1d:bb:
81:ec:41:4f:c7:d6:77:36:21:46:5e:2c:7b:5f:23:
c2:12:a5:bc:9e:3c:25:19:05:63:35:61:43:10:f2:
8f:ee:d9:0c:a3:a1:6d:1e:a4:c8:d1:78:f9:84:0f:
f2:53:f1:76:47:dd:d7:fb:41:c3:1d:55:45:6b:49:
cd:eb:91:04:51:6c:12:79:60:8a:71:b8:53:56:e9:
fd:71:21:df:d6:cd:e4:80:2d:83:b0:89:a0:98:cc:
9f:74:14:c9:ad:dc:10:c0:2f:e3:37:68:7a:c3:8f:
e3:4f:40:70:d0:09:fd:c3:4d:52:1f:1d:0d:f3:c8:
01:f2:51:8f:f0:60:80:60:8e:5e:3b:10:09:76:9f:
ab:5a:a1:eb:bb:1c:85:95:3d:d3:1f:d0:5e:ec:04:
33:f0:df:65:4d:d5:75:1b:93:da:84:37:63:c5:28:
43:c0:6c:fc:02:77:2e:55:ea:24:27:41:99:7b:14:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:68:69:24:20:98:8C:2F:52:72:CE:C6:FB:3E:47:E6:F5:04:9C
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:b1:5b:a6:88:08:32:f5:d4:89:81:c9:d0:e9:9e:95:65:
2c:2f:79:79:d2:a6:2f:9d:d6:19:96:23:b9:8c:24:2e:ee:e2:
23:a5:35:f1:e3:09:14:41:cc:58:b2:cd:9e:b2:c2:a8:e2:99:
00:3c:24:b6:21:f8:6d:3d:f6:5c:f2:d7:21:ba:58:90:b7:50:
78:25:54:51:b4:be:13:8a:31:c3:c4:83:7e:5c:b1:20:3a:a0:
d9:ac:b6:d1:47:2e:6b:ce:4a:7b:79:d8:56:23:68:9d:52:2d:
de:2e:5f:0f:23:99:9f:f9:25:2f:26:16:b8:12:d1:e3:e2:c9:
b5:3e:83:be:56:1a:20:0b:fa:b7:86:86:73:c5:e4:fa:0f:8d:
79:9d:73:a1:8b:ca:51:58:7b:3c:9a:11:79:33:46:72:9a:f1:
f6:3f:90:ea:12:b0:42:24:c9:9f:51:3e:0e:7f:0d:76:f1:79:
31:c7:16:24:71:1d:20:f8:f4:fe:e6:e2:e2:a8:1d:ef:1f:af:
12:9b:00:fd:b7:28:d0:50:8a:81:85:b3:b5:da:7e:d5:bd:64:
25:0a:e8:1e:6c:b0:a4:1f:3c:f6:7c:93:09:01:01:39:79:88:
a9:76:0c:fb:09:0e:be:c6:26:d0:04:19:5e:ed:25:ef:76:c5:
13:5f:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:47 2025 by rpki-client