Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: z/8juT4MplOxtE75YdrNW+3hWb5a9EvG/xN5Cu0GWy8=
Subject key identifier: 6C:8F:09:22:6B:A7:0C:25:4F:0F:6D:FF:1E:21:1A:A3:85:06:43:40
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019840D036304901594FAFF1DFE36BEEF205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 04A1
Signing time: Fri 25 Jul 2025 09:00:43 +0000
Manifest this update: Fri 25 Jul 2025 09:00:43 +0000
Manifest next update: Sat 26 Jul 2025 09:00:43 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: D7htyfr7GcAbo51NSZnI9KPy7o4a9jf55TMbTfTgl0c=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d0:36:30:49:01:59:4f:af:f1:df:e3:6b:ee:f2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jul 25 09:00:43 2025 GMT
Not After : Jul 26 09:00:43 2025 GMT
Subject: CN=6c8f09226ba70c254f0f6dff1e211aa385064340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:08:77:1b:32:cd:d1:7a:6a:6e:2c:cd:48:
f9:a3:97:21:a9:4d:f1:e3:e3:19:6d:f1:71:da:8f:
5e:58:c3:5b:b0:d2:0c:4c:c0:0b:f5:3d:73:de:9e:
f5:f3:a3:8c:60:d2:f7:e3:e7:b5:07:76:48:9f:6c:
91:d8:8c:73:a8:ab:84:3e:c1:80:c0:ff:27:1c:e0:
87:f2:e7:2a:be:96:bc:22:57:81:24:70:9c:de:56:
32:7e:82:33:47:49:a2:01:d0:8e:96:37:05:61:48:
aa:a7:fe:fa:3e:9e:2e:86:bc:ab:b7:85:8b:f1:16:
1d:70:e5:d2:60:50:ae:57:0c:15:db:16:a9:78:75:
a7:84:80:df:5e:f2:48:1f:ba:4c:cf:aa:ce:78:60:
92:29:2e:69:f8:ac:37:e6:ee:59:b4:18:2a:ac:b5:
e7:2d:ed:04:6c:3e:a0:81:ed:b7:cb:d0:e6:65:9d:
83:d7:ee:23:86:50:8a:a9:b3:b3:b2:55:2e:c8:32:
5d:f9:dc:4c:65:e4:a4:a2:8a:c0:ae:cc:ab:8d:3b:
da:f4:9b:3b:74:da:0d:bc:73:9a:78:fb:f6:9c:41:
0d:e9:3f:37:41:e5:84:70:7f:b4:d2:e9:0e:71:28:
3f:3e:dd:cf:30:38:0d:29:c4:0d:86:45:2b:d0:90:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:09:22:6B:A7:0C:25:4F:0F:6D:FF:1E:21:1A:A3:85:06:43:40
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0c:8f:d2:4e:75:aa:67:af:d3:27:8f:f9:5e:3d:b9:b2:cc:
77:fc:77:ee:0c:41:35:46:e4:79:62:e8:37:ef:5f:06:58:85:
b5:07:6e:43:c2:0f:49:a9:27:e4:98:54:35:2e:47:b3:65:9c:
71:09:d7:15:ed:e7:2d:ff:42:ba:80:c2:6e:b2:4c:b9:d2:3b:
ec:36:ed:08:fb:df:83:8c:c8:2c:e5:ed:13:5f:d3:f6:0a:56:
db:ce:c3:ea:83:93:36:1f:a5:c1:bf:5a:05:59:07:8c:87:81:
69:b5:db:ff:cf:d7:d7:3f:e8:f8:bf:7d:81:c2:2e:dd:1c:9c:
80:7a:0b:a8:be:74:cd:b6:25:33:bf:43:ca:51:f1:90:bb:6f:
df:60:c5:6f:2f:11:d1:9a:56:1f:93:5b:71:c7:37:a0:f2:69:
d7:c3:4a:e1:46:8d:2e:11:33:78:65:cf:d3:d7:4b:aa:43:17:
7b:36:1d:6a:a9:2f:27:26:b3:8a:ca:15:c7:bb:ac:11:03:d6:
e1:1b:92:12:30:d6:57:64:a8:27:b9:57:f5:09:a8:a9:8b:7c:
17:60:fb:d2:67:01:e4:b3:81:76:83:fe:4a:c5:5b:5c:5b:7e:
62:17:dd:67:7a:2a:18:f0:32:c5:be:8c:fa:63:b3:80:0c:91:
94:2f:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:51:13 2025 by rpki-client