Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: mt/WP6Qr8+EoFNuj1+ScwZ5u778pb1mUnDl4pO1Sjng=
Subject key identifier: 25:2E:9C:07:EF:AA:7E:2C:F0:51:CD:16:83:8A:CC:9B:67:47:2F:C1
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019849653086C28EF22BFA57F796FF04A959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 1476
Signing time: Sun 27 Jul 2025 01:00:24 +0000
Manifest this update: Sun 27 Jul 2025 01:00:24 +0000
Manifest next update: Mon 28 Jul 2025 01:00:24 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: HS6Ly/U9vJDnuSkvNVobnEIcj+fyX2WQIR9XOVuWc8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:30:86:c2:8e:f2:2b:fa:57:f7:96:ff:04:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Jul 27 01:00:24 2025 GMT
Not After : Jul 28 01:00:24 2025 GMT
Subject: CN=252e9c07efaa7e2cf051cd16838acc9b67472fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:77:e5:32:34:48:c9:fe:99:3d:0f:45:9d:
66:77:52:e9:e2:28:3d:b7:2b:e9:c9:83:c4:58:fa:
5d:9d:6e:38:4d:da:f4:e0:03:8e:a5:5c:d4:80:b8:
64:1b:78:64:5f:c8:2c:9f:ce:fb:e4:5b:17:56:8e:
8d:96:f9:0e:07:53:02:b0:7b:93:f2:87:14:3c:3b:
8c:09:e2:10:e0:f8:9f:0d:2b:dd:47:55:12:7c:72:
34:89:ef:34:c0:ef:27:46:82:a6:f6:f3:73:3c:a3:
d8:1a:c4:f6:17:ed:62:cd:a6:f6:2c:84:ab:7d:15:
90:ea:69:bd:6c:62:ef:b0:30:9c:31:2a:5d:62:f4:
99:e9:84:cf:ee:fb:ea:13:18:3a:a3:98:83:61:40:
a1:ea:b7:3f:6d:30:31:a2:38:8b:b7:25:32:e6:ca:
ea:d5:76:12:9c:6d:d5:7e:1a:d7:94:5d:18:93:d8:
48:d0:74:38:f6:48:87:a5:1b:2a:62:74:eb:8c:f5:
4f:f3:54:37:e4:96:d3:de:0d:a5:2f:db:65:2c:b6:
15:c5:f0:1b:2e:d3:90:cc:4a:8a:ed:cd:0f:09:e2:
e3:2e:4d:f7:dc:81:a4:e5:43:f0:01:96:91:91:a6:
05:8c:e7:b4:30:cf:00:91:64:df:7d:56:ef:58:c7:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:9C:07:EF:AA:7E:2C:F0:51:CD:16:83:8A:CC:9B:67:47:2F:C1
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:e9:e4:e7:8b:6c:0a:f4:e8:3d:62:8d:ac:e3:da:35:da:
cc:d1:ef:70:37:a1:47:04:27:cf:87:80:d2:f6:a0:76:4f:59:
56:72:f7:2d:de:3e:d3:e3:ff:8f:10:77:3c:c1:6a:6d:9f:8c:
65:16:4e:43:02:da:88:e7:58:f3:ae:67:b3:29:ba:0e:b8:2e:
a8:7e:d1:06:68:11:48:85:19:e9:b4:b1:da:47:2b:b0:d5:84:
96:65:b4:e0:0a:e8:6e:96:2f:e7:f3:c2:89:a6:af:ee:64:1d:
3f:c7:05:7d:e6:d3:6f:cf:13:03:9c:bb:c0:04:b3:1d:ff:a7:
d7:54:8b:af:68:66:b9:1c:c8:14:5e:37:49:d3:82:b6:17:cf:
fc:fc:b9:70:e6:88:a2:cf:50:c5:6c:6f:cf:a9:ff:61:37:65:
ff:f0:a0:00:f6:b2:de:17:9f:d2:3c:e7:75:02:d4:f3:f8:e7:
b9:8f:79:67:5f:73:97:c2:44:ac:67:dd:3d:1a:a0:2c:7d:d6:
09:3a:42:ee:58:24:c8:10:1c:02:23:43:e7:3a:6d:08:2a:f2:
28:c5:bd:b7:87:7b:c4:60:d0:71:18:a9:2a:a4:e2:5f:5c:70:
90:25:b7:9f:36:db:aa:6e:bf:64:d3:f9:bb:d6:d6:3a:ef:5f:
0e:6d:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:42 2025 by rpki-client