Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: kmTy/9hr3TUE7d0nchGWPJ0M93buOp6uMUZHf35opdo=
Subject key identifier: DC:FF:82:3D:66:D6:BA:FC:2A:94:FE:CF:7B:28:53:EA:50:86:8D:F3
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 0198402B144A2CEE79BC7260AB5E2D6E3E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 06:00:21 +0000
Manifest this update: Fri 25 Jul 2025 06:00:21 +0000
Manifest next update: Sat 26 Jul 2025 06:00:21 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: 07+M0lcfc6hBK8XA4bvgI7bC70nRHtEolNlWvVcZ98w=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:14:4a:2c:ee:79:bc:72:60:ab:5e:2d:6e:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jul 25 06:00:21 2025 GMT
Not After : Jul 26 06:00:21 2025 GMT
Subject: CN=dcff823d66d6bafc2a94fecf7b2853ea50868df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:87:49:83:f0:cd:13:51:ab:d4:f9:a5:a4:
13:a2:81:a4:ca:18:88:38:bb:83:30:ae:1e:3d:36:
48:11:5b:70:f5:e1:71:b4:2e:fe:9c:a0:eb:01:41:
bf:11:9a:84:0a:15:2b:b7:d1:ac:6d:a5:b2:10:30:
eb:19:d6:5e:aa:3a:42:dd:a0:fc:bf:1c:d5:4b:3e:
66:04:ed:a1:db:8d:f1:55:bb:6a:d3:f7:e2:5c:30:
ee:65:e5:05:69:cf:8d:51:9f:90:2a:09:f0:f3:af:
46:64:17:ae:65:f5:19:5d:b5:fb:c7:be:18:c8:99:
2e:98:5d:8e:c7:3f:02:40:f7:2f:73:b3:09:20:1f:
66:e9:de:6c:3f:77:b6:60:f8:d0:43:95:f9:48:74:
5c:ca:99:ff:58:f1:59:89:ba:93:64:91:59:27:a9:
62:69:30:0b:8d:90:f6:5e:93:40:08:0e:a5:10:ec:
0d:39:33:43:0b:e7:2f:96:99:cc:71:9e:3a:40:83:
31:6a:0b:74:24:d9:8b:1e:34:a5:85:d8:d0:40:e8:
f9:8d:1f:bc:b4:2d:98:2e:a9:8d:a2:cd:d1:ee:ba:
17:a4:24:5d:13:a5:2f:3c:64:36:25:78:02:e3:a0:
a3:bc:7d:34:81:44:5f:4d:89:9c:85:b3:11:83:3e:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FF:82:3D:66:D6:BA:FC:2A:94:FE:CF:7B:28:53:EA:50:86:8D:F3
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:76:66:16:cf:73:94:3b:58:5d:c8:f5:f2:d2:2f:14:56:
62:20:3b:cd:63:36:48:c9:78:c0:f9:38:e3:5e:70:2e:c1:8c:
ce:de:de:2f:ee:c1:09:c9:f6:6d:bb:6f:08:23:66:c2:1b:50:
e9:d3:dd:64:69:6c:7d:63:65:bb:f0:1a:30:d0:3f:f2:fe:7f:
b3:5e:21:73:97:d4:2e:ad:a5:0f:aa:c1:17:2e:ce:35:38:65:
60:34:b1:9a:09:50:0c:64:06:0e:0e:ce:31:d8:c4:34:dc:af:
00:d9:ff:14:4c:59:6a:72:5c:c6:a9:f0:f0:74:a2:3f:a8:37:
61:f2:db:45:f2:5f:6f:0c:44:c6:6a:e9:ff:3b:49:62:0d:93:
83:dd:35:92:a3:2a:85:6f:1e:c5:cc:32:d2:88:2b:d6:f1:6e:
1a:25:2f:a5:ed:6d:ca:db:49:12:85:a2:c8:36:91:93:90:06:
74:8d:4c:07:eb:7b:cf:00:00:18:7f:a8:a5:a1:b4:be:5f:c8:
d1:e7:98:66:85:5e:03:66:b1:b7:67:2e:63:3b:c5:9b:d9:6b:
4c:e0:e3:b2:70:54:d7:a7:0d:94:e7:97:33:26:fb:0b:9f:66:
64:6e:0f:99:b7:76:f4:6b:41:68:15:64:9c:dd:b2:d8:d5:98:
7d:bf:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:48:13 2025 by rpki-client