Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: RzGp4mu86mBx7TvDFIh1RXKn26qe25ts7GoObEuaeV4=
Subject key identifier: 1A:27:C8:E2:5A:39:79:B4:0E:0C:DA:45:48:39:AB:24:7F:9B:F0:99
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 01984A4151B9092038726EE5D2DF6CA8F319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0D1F
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: effHfv8olioSKLeLwV+kG9uexDnMkzI5DLhQ2XvSDok=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:51:b9:09:20:38:72:6e:e5:d2:df:6c:a8:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=1a27c8e25a3979b40e0cda454839ab247f9bf099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:94:97:96:9d:9b:de:7e:f5:ca:83:5e:f2:
85:fc:bf:2b:41:ef:87:e5:46:80:25:e6:ad:17:f5:
0f:0c:dd:d6:7e:13:0c:10:7e:62:35:6f:d6:37:7a:
f6:4f:c8:80:cc:9b:b5:55:2d:1f:75:a8:9e:43:c1:
e9:d9:b4:12:eb:7a:2b:09:d4:a6:2d:4f:25:1c:de:
24:55:0d:23:ff:c3:f1:1b:ca:9a:5b:a7:e5:53:4c:
48:ad:31:4d:38:f0:5c:23:3c:87:3c:56:9d:67:06:
f0:46:e5:44:e6:8d:36:d4:b9:e9:bf:96:ad:5e:62:
58:01:da:4a:fd:35:0f:88:fa:a0:40:42:e5:ab:d7:
f4:ae:af:61:c6:90:77:02:42:5a:e0:60:28:a6:ad:
19:87:e9:6c:a1:c7:c3:f4:c6:1e:0c:56:16:50:8a:
f0:07:d5:d8:a3:a3:4c:e9:59:22:81:0b:30:c3:ac:
c0:41:d7:43:0f:62:7b:3d:0a:f8:1a:36:81:18:30:
5a:9a:2e:02:b3:ed:96:c3:d7:51:a3:c0:d6:4a:8e:
53:c7:8d:da:bc:6d:01:e4:8d:58:79:06:c2:15:67:
3c:a2:1f:02:97:e6:6b:3b:4f:e3:fd:94:31:9c:a2:
12:5f:a8:56:e5:5f:c8:31:23:b9:60:c4:4c:41:60:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:C8:E2:5A:39:79:B4:0E:0C:DA:45:48:39:AB:24:7F:9B:F0:99
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:23:6d:85:20:27:8f:dd:a7:43:c6:f9:da:7d:80:15:1c:
96:2f:4e:07:12:41:ce:c9:77:78:ce:98:1d:2e:96:c8:8e:cd:
53:5f:ed:23:c6:5b:05:ad:41:24:4a:11:68:3f:bf:71:ee:81:
6e:22:d5:37:3d:23:db:3f:0d:2e:83:5c:52:e9:80:f7:7e:99:
fb:7b:2f:4f:e4:3c:8d:71:dd:e2:f4:e9:84:c6:65:e7:47:bc:
21:34:91:05:d0:c9:3e:5f:b5:17:9e:37:3d:84:92:64:78:3a:
62:2d:20:ab:53:0d:83:e0:5e:84:03:aa:61:1f:25:36:eb:b1:
d8:98:a4:cc:b8:56:4c:69:79:e3:c0:d3:d8:9e:12:86:08:5b:
34:bc:a3:96:1f:05:a6:35:5e:69:1f:72:6d:61:fe:d5:54:d7:
35:57:12:c5:e1:58:da:44:9f:80:d2:7c:61:cb:59:dd:49:52:
3a:02:04:f3:00:98:38:e3:40:d8:72:b6:bd:79:31:2a:2e:14:
e9:16:63:64:ee:50:2c:8e:ed:f1:27:be:47:44:97:a0:24:95:
7a:6a:71:83:73:fa:fd:3e:ed:04:a6:2e:67:fe:b3:7d:94:f2:
ca:29:e4:f9:4b:e0:c6:81:00:b5:7a:87:da:6a:44:71:22:55:
99:a4:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:17:06 2025 by rpki-client