Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: QmMbflQQ664uC+meBrWcziTQxEnexrIPHQGgf1Qx8Sg=
Subject key identifier: 2B:5A:DF:60:EE:5D:9E:D4:DA:65:12:26:44:55:B4:AA:77:34:85:C6
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 01984A416BEF81C919458BF7A314A43A462E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:58 +0000
Manifest this update: Sun 27 Jul 2025 05:00:58 +0000
Manifest next update: Mon 28 Jul 2025 05:00:58 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: uP3O5fZiiD/pJ82qlJCaGy49/Q34ZV+3ZuNU0Q0AO6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6b:ef:81:c9:19:45:8b:f7:a3:14:a4:3a:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jul 27 05:00:58 2025 GMT
Not After : Jul 28 05:00:58 2025 GMT
Subject: CN=2b5adf60ee5d9ed4da6512264455b4aa773485c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:2f:c7:77:fa:7a:bf:48:7c:5d:85:d8:83:
f5:65:7a:a7:63:32:18:ab:fc:4e:c3:25:ff:00:b0:
a1:a7:d8:63:76:30:17:b5:68:1e:2b:d2:32:74:75:
ac:94:41:59:24:dc:c9:85:02:11:f9:31:6e:93:45:
8a:30:68:25:b7:24:1e:ab:64:44:86:73:2f:3c:b1:
ce:2a:43:51:b0:41:bd:6e:9d:a7:6a:a1:d6:84:fe:
22:0d:9e:24:65:b3:e9:8a:7d:f4:6e:45:77:ca:73:
50:32:6e:83:9a:e4:69:97:b0:dc:24:66:b1:a0:5a:
47:8d:97:ac:17:df:53:9c:15:e8:d5:6f:fc:66:d6:
2e:f8:55:c7:ac:ab:2b:25:be:cb:b2:57:1d:77:aa:
ba:b5:31:06:c5:95:d3:10:56:5e:58:59:f9:49:93:
8f:ff:56:9e:26:03:b1:14:f6:e3:d5:76:10:59:c9:
b5:c5:db:b3:a1:43:5e:43:0d:bc:46:68:30:e9:84:
04:b2:46:03:cc:32:18:8f:7e:11:8c:95:5b:42:da:
68:3d:15:18:7f:af:8e:05:f5:69:79:9e:e8:b9:eb:
8b:d6:f1:cc:43:5e:f2:b8:a3:fc:e1:2b:35:52:10:
b9:91:a5:a9:43:19:8f:7e:de:9f:ab:f8:db:74:c2:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:DF:60:EE:5D:9E:D4:DA:65:12:26:44:55:B4:AA:77:34:85:C6
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:17:b8:ec:18:3b:91:c2:72:42:f9:d8:73:7a:40:66:88:37:
74:c6:f7:75:0b:5e:aa:7c:35:b5:bf:19:db:6f:bb:53:dc:99:
99:b2:8a:f1:27:16:4a:a3:14:d5:7c:8e:f0:28:6d:0b:e9:fa:
7c:bf:bc:b8:6c:f1:0d:6f:c7:bf:31:c4:38:cc:76:ab:a2:19:
75:39:71:a1:1f:72:07:25:10:16:83:75:d4:b6:a3:2f:4b:66:
27:fd:5c:84:5e:16:8c:4b:9a:13:1b:b6:2e:8b:94:a5:5c:31:
83:19:46:5f:a5:cc:79:e2:16:07:09:e8:af:64:cc:54:2e:9b:
77:7b:f2:b3:53:af:50:be:7a:1a:c3:a9:2d:de:d6:93:8e:a2:
f1:d0:92:ed:ad:38:86:1d:56:4a:46:74:89:ae:19:de:84:3c:
ea:a2:84:54:8b:31:ac:40:82:b3:1d:5d:50:08:83:b5:4e:5d:
96:61:70:6a:c6:44:44:92:be:f9:25:bb:d5:08:10:d7:be:81:
23:1c:81:43:77:d1:b4:f7:fe:ae:43:48:9e:d7:98:b3:a1:86:
94:df:2a:a8:f0:67:7a:a6:11:9c:61:6b:99:01:35:6e:dc:bb:
7d:10:e5:f5:1e:b8:b8:e8:7e:0f:64:c8:a8:fd:f3:a2:71:7f:
3b:71:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:37 2025 by rpki-client