Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: Q7P9PHEYUE0fSyUb3ve8MFTnXAmzalkS3DWIMndDvIE=
Subject key identifier: 7A:9F:11:01:6E:C5:13:E5:CF:65:89:C6:FD:14:0C:F2:CA:10:44:83
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 01984A417CBB83460BEA72107E2E8A0D10D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 05:01:02 +0000
Manifest this update: Sun 27 Jul 2025 05:01:02 +0000
Manifest next update: Mon 28 Jul 2025 05:01:02 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: h17yCvotvIZ4HL/9fADCwXngjwBX7Yz7k9mKxDktmaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7c:bb:83:46:0b:ea:72:10:7e:2e:8a:0d:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jul 27 05:01:02 2025 GMT
Not After : Jul 28 05:01:02 2025 GMT
Subject: CN=7a9f11016ec513e5cf6589c6fd140cf2ca104483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:e2:4c:aa:15:c8:2f:d5:99:ad:e4:58:a0:
79:a8:7c:cc:d0:ba:b3:a6:80:a3:0b:32:ac:15:bc:
90:26:d9:69:03:24:54:44:08:f2:bb:6b:99:41:49:
a8:62:89:a6:eb:62:f5:1b:4a:0b:15:65:57:4d:cc:
a1:31:97:55:8a:98:c1:da:ab:b3:a2:14:67:1c:ed:
c2:b2:ab:5f:3d:80:94:24:5e:29:f7:c6:f3:c0:e2:
4b:7c:e3:03:d2:87:8b:32:0e:2e:55:ec:70:4e:da:
e8:f4:82:16:ab:c4:e1:3b:36:3f:bb:2b:e2:c9:71:
c8:2c:f1:b2:17:6a:04:fe:c9:25:19:57:2a:83:76:
db:a9:37:c5:5b:f1:87:f3:8f:ee:d6:08:71:4a:dd:
53:92:b6:9c:47:b6:61:91:52:94:3b:db:c9:25:3d:
4d:b3:e9:ed:fe:aa:b3:98:b3:2f:a6:76:b1:1a:49:
f3:6d:f0:04:54:83:8f:de:f9:92:18:c2:d2:a7:f0:
48:58:48:47:aa:ea:a0:7a:af:4f:af:7c:d8:0b:9d:
ee:00:13:98:d7:6b:c4:73:27:2c:69:45:df:df:8c:
a2:07:7b:3f:fa:20:f7:bb:3f:d3:b2:50:2e:94:ac:
6e:44:4d:92:49:29:ef:62:d2:37:05:b0:49:df:d2:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:11:01:6E:C5:13:E5:CF:65:89:C6:FD:14:0C:F2:CA:10:44:83
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:79:24:3d:52:d0:c9:53:64:12:88:c5:70:bf:03:83:99:
e1:4f:dd:ea:12:67:3a:49:86:21:2e:9a:b4:7f:45:48:40:24:
3c:b9:99:ca:5e:42:d1:fe:51:df:24:42:96:e9:67:3e:14:4e:
18:e7:c3:f2:c2:6a:c2:3b:d1:5f:51:f0:d2:7a:4d:0d:fc:43:
4b:72:37:d4:2a:c1:e7:ce:89:a2:28:dc:15:c1:49:f5:1f:a6:
48:da:0a:42:ec:9d:a7:7d:32:20:4f:fe:11:c2:1b:3d:fc:64:
93:a3:51:c6:96:8d:97:84:6e:56:40:80:46:09:92:c4:bf:b8:
a6:4d:20:e5:e8:41:04:1c:b3:42:f3:50:b3:51:f8:ae:c0:02:
c7:12:e4:ad:93:76:ed:41:69:1a:f0:65:b0:4a:aa:59:aa:ea:
99:c8:06:ad:fa:92:55:7a:d3:6f:8d:b6:8c:3d:9b:b8:9a:25:
47:fe:2a:6c:5d:6f:3a:92:c9:b2:47:d1:27:e7:63:5a:ad:d9:
c6:b1:fc:f6:63:dc:44:fd:3d:ce:0e:88:3f:fe:e5:b9:41:03:
f9:76:fc:34:b1:ae:e8:01:03:55:8e:3c:05:bc:5f:0c:e9:16:
09:4e:d1:b5:fd:44:c6:b8:af:3c:0c:63:46:77:cf:7c:ed:03:
27:79:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:35 2025 by rpki-client