Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: 8/Y9n1ajtUNY/8BonOj0wLWlr5cy/xTCpQ4AS6S7sbo=
Subject key identifier: B7:72:5D:81:96:5F:77:8B:5E:18:C1:D4:DF:0D:3F:B2:75:23:04:70
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0198541FEE3C1CEE1C68E8EFAB30A3D7F2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 03:00:35 +0000
Manifest this update: Tue 29 Jul 2025 03:00:35 +0000
Manifest next update: Wed 30 Jul 2025 03:00:35 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: cNsTXDhbL7RwRuy2+3AOuikVAvR+dnQ09DOSrKNruVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:ee:3c:1c:ee:1c:68:e8:ef:ab:30:a3:d7:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Jul 29 03:00:35 2025 GMT
Not After : Jul 30 03:00:35 2025 GMT
Subject: CN=b7725d81965f778b5e18c1d4df0d3fb275230470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:f4:8e:c4:af:52:a9:92:d5:fc:b8:12:80:
8a:ed:0a:3d:e6:49:21:66:c1:0a:dc:99:5f:98:72:
4e:25:fb:42:e1:fd:f5:69:87:3a:a0:5c:ce:86:e2:
6b:80:e2:6a:34:76:c7:f8:43:00:e8:9e:ae:64:73:
0a:6d:cd:a0:fc:60:1d:35:48:16:7b:4f:0d:42:50:
45:9c:62:61:03:24:6e:eb:ea:41:26:b2:d5:58:24:
e5:94:5e:21:f0:74:06:e2:b4:03:06:ee:b5:59:c0:
c3:51:43:a8:d5:7e:cd:18:9c:f4:04:b7:cf:41:ad:
c0:a4:a1:78:f4:8b:bc:d1:0a:ba:53:8d:d0:1e:28:
d4:ae:97:29:74:26:bc:60:28:76:96:2b:70:3a:79:
83:1c:69:75:eb:ea:49:39:13:ab:df:90:7f:5a:d8:
17:60:cf:1b:0b:a3:4a:0e:59:ff:5c:33:39:e4:20:
e0:57:72:0d:68:ef:4c:0a:ea:33:18:8b:de:d3:ad:
ba:b8:0e:9c:82:ae:ae:cc:a1:b7:fc:4d:5d:d8:e5:
f3:19:6e:d2:2c:14:6e:75:17:ca:51:9f:98:1a:a8:
3f:ea:37:a5:ee:04:4b:c2:b2:0d:6f:5d:0a:08:31:
71:fb:d1:e3:04:cf:3a:c0:6a:85:36:d5:44:27:94:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:5D:81:96:5F:77:8B:5E:18:C1:D4:DF:0D:3F:B2:75:23:04:70
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:49:50:51:23:12:cd:ac:7e:67:e1:87:cf:a1:37:dc:0b:6f:
db:6c:d1:cd:9e:3a:af:46:08:0f:86:9c:fb:a9:e6:b5:66:93:
e8:de:c8:21:15:2e:9a:e2:f8:99:9d:a9:95:59:f2:0f:2c:fd:
d4:33:e8:f5:ca:18:e3:08:68:12:01:7e:9c:84:9b:fc:50:3b:
0e:3b:4c:58:06:3d:cc:f2:65:34:bd:99:ca:58:73:3e:04:d7:
61:ba:b3:25:ae:2b:d4:94:85:b2:ba:7e:e6:a5:67:87:c9:d6:
a1:c7:ea:0f:82:33:03:3b:32:65:3e:7c:7e:08:1b:2e:0c:54:
67:a1:20:30:5b:00:1b:1a:c4:32:6f:21:d2:34:68:76:2d:c4:
a9:c8:7f:6c:d4:11:f2:96:6b:d6:5f:bb:a2:4a:e2:c4:fc:d3:
31:b4:23:e3:80:3f:05:81:63:9b:96:6a:a6:d9:19:13:fb:58:
3f:d5:05:18:2e:99:d4:06:6d:f1:2f:fa:30:a2:f3:52:ea:d3:
35:27:2d:a0:49:be:2f:63:b7:e3:63:d6:cf:75:1a:73:6a:3c:
c6:37:7b:81:d8:e0:98:77:4c:d3:f5:07:52:77:f2:02:af:0c:
4a:00:cf:85:9d:23:82:8d:20:7b:16:98:0e:72:98:fd:64:23:
33:5f:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:23:27 2025 by rpki-client