Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: ExTtvHwcLo9Ki0qRrrk3oJJOWb5MSAxpRIKnN4R803w=
Subject key identifier: 42:0F:B1:B5:E5:CE:E5:FB:74:80:66:5D:A8:EF:E2:6D:CC:86:0C:D6
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 019848525BD2F118F02EA488C78136BCE12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 20:00:13 +0000
Manifest this update: Sat 26 Jul 2025 20:00:13 +0000
Manifest next update: Sun 27 Jul 2025 20:00:13 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: w//SagfX6aSwU4d2iELxq8y7kNFKNH3WZAEKEd04WGQ=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:5b:d2:f1:18:f0:2e:a4:88:c7:81:36:bc:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jul 26 20:00:13 2025 GMT
Not After : Jul 27 20:00:13 2025 GMT
Subject: CN=420fb1b5e5cee5fb7480665da8efe26dcc860cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ea:93:b0:bb:6b:a1:09:7f:eb:7d:7b:cf:
d2:7b:7a:8b:96:9d:8f:c5:3c:3f:b3:51:8d:6d:4c:
78:e8:7f:f1:eb:f4:51:0d:53:c9:39:19:86:b5:81:
40:f0:72:13:13:4b:65:ec:19:d6:93:28:26:58:24:
05:9a:28:8b:b6:4b:50:6d:24:1c:25:c8:d3:bd:d8:
5c:51:46:82:81:25:ba:9d:a8:13:68:c1:95:d2:06:
2b:03:0c:68:de:0e:e5:b0:c0:1b:97:04:7d:d3:3a:
80:df:bb:74:b1:a5:41:23:94:e2:17:78:24:e0:53:
c3:f1:44:74:45:ac:13:d6:7a:c3:d1:36:88:7a:fd:
33:88:ac:3a:d4:ff:95:f9:4e:b1:8b:72:75:b1:a7:
83:6d:dd:13:a0:76:05:3f:b7:42:14:58:83:82:08:
31:e1:af:f6:e4:f8:bf:a6:a6:55:7c:3d:d5:fd:1f:
5b:5e:c9:59:85:cc:51:21:9b:18:d4:d8:92:7f:71:
4e:17:29:cd:e8:e8:c2:c4:d7:63:13:ce:1c:71:ce:
9e:77:fb:63:c9:3e:49:25:29:4e:dd:fa:10:de:09:
7b:ed:6f:e9:e2:cc:8d:c2:b0:fa:5c:78:32:2c:64:
35:61:09:89:30:17:5f:94:b7:91:15:65:c1:0f:99:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:B1:B5:E5:CE:E5:FB:74:80:66:5D:A8:EF:E2:6D:CC:86:0C:D6
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:10:f6:72:6c:5f:d5:2a:50:35:1e:2e:9e:86:19:b0:05:
59:30:5c:db:b4:10:13:1b:d8:33:bb:9b:67:99:63:2b:9f:71:
43:25:40:c3:ba:e8:00:66:09:f1:c9:92:80:a8:33:62:60:8d:
ad:1f:9c:68:20:28:b4:79:36:74:2e:0f:d2:bf:5f:f6:f7:24:
bf:6f:4d:d3:d3:7d:f5:a5:b4:86:80:be:1b:eb:3c:24:28:ea:
d0:87:6e:4b:9f:27:7c:12:7f:fb:a4:c6:40:50:45:79:a2:38:
db:0f:79:d0:bb:de:d5:21:5b:b3:c5:f2:fe:a1:bc:67:6e:bf:
2e:27:0c:50:e5:11:fc:44:7d:dc:e9:17:4f:7e:bf:5d:68:75:
98:81:33:8e:c7:d2:6d:a3:55:45:1e:92:59:b5:1a:46:d2:57:
0c:79:8c:4f:04:90:ea:1d:35:fa:7f:cf:0d:c6:47:74:f8:08:
f6:80:a9:ac:ed:cb:f9:1e:52:ac:d6:94:1b:f5:eb:34:3f:06:
57:71:a0:45:81:0d:c7:67:74:87:e9:ef:ca:9d:cf:7a:c1:b8:
f8:5b:84:ac:87:6b:2b:28:14:98:2b:39:96:3a:a5:60:45:e1:
21:54:7f:20:ff:a7:32:2e:61:6d:e4:79:b3:51:6f:2b:dc:29:
96:83:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:37 2025 by rpki-client