Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: EXcCk48sUzSBCckSl24cTmRAB/EeENo1ZBzT4XzyPsw=
Subject key identifier: 6F:E3:D5:22:DA:73:BB:62:56:7A:E9:02:92:B4:EB:68:9F:F6:C8:C7
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 0198451AA5A8E7C913007583F035EF7C7DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 15B9
Signing time: Sat 26 Jul 2025 05:00:30 +0000
Manifest this update: Sat 26 Jul 2025 05:00:30 +0000
Manifest next update: Sun 27 Jul 2025 05:00:30 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: ggK4cPVfPdC6yZwARc13Tpx85VrkmxyZME8zHA4WsBA=)
2: J3l5rSoC85N4xAXm2HxvLusDt_A.roa (hash: jgHAZqarPBwPQhS0mFPS0Zo6XKz3AtLQwgXQdr9WvR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:a5:a8:e7:c9:13:00:75:83:f0:35:ef:7c:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jul 26 05:00:30 2025 GMT
Not After : Jul 27 05:00:30 2025 GMT
Subject: CN=6fe3d522da73bb62567ae90292b4eb689ff6c8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:aa:94:9f:fd:8a:a6:ed:87:9e:c8:cd:88:
c6:a4:f2:f0:f4:56:d8:8f:01:7b:de:d4:b0:b4:81:
b0:5c:63:f0:09:9e:85:ff:6e:96:1f:f8:44:85:b7:
1c:4b:28:0d:97:5e:d4:f3:d6:1c:64:62:55:02:22:
5f:c8:37:31:f3:cd:0f:d3:36:3f:67:88:94:b5:22:
84:1d:08:3a:66:f6:db:ad:53:23:d8:a5:2c:f0:9c:
c0:db:bf:a2:59:95:7e:ad:e4:5d:3e:7d:b2:23:f6:
74:2f:b5:67:e8:9c:7b:e3:83:50:c2:ed:a4:88:33:
8d:09:90:84:d0:df:52:06:c2:0c:fa:b5:e8:f0:f7:
8b:4c:f0:10:c9:4d:3d:67:f6:cd:8c:a5:c3:dc:a3:
eb:6b:26:ce:55:b4:bd:48:b7:68:d2:9d:eb:bb:72:
43:2c:d2:24:e8:5c:af:31:ea:19:ab:ab:eb:40:8a:
11:82:f9:06:b1:f7:fd:b3:92:66:41:cf:34:68:c1:
ed:c8:97:5e:23:c9:3a:da:ad:17:db:6e:a6:c4:b1:
bf:af:27:17:6c:c2:48:bd:f5:ef:af:bf:0c:95:ac:
f9:c0:15:94:9d:b0:8d:8e:fa:a1:c1:f2:72:0e:16:
44:9d:1e:f9:e3:d1:51:3a:4d:d3:78:a6:e5:3e:69:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:D5:22:DA:73:BB:62:56:7A:E9:02:92:B4:EB:68:9F:F6:C8:C7
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7e:d1:be:d8:98:52:3a:e0:39:34:f7:6c:e5:d5:43:bc:b4:
96:ba:3e:a0:d1:23:46:14:8f:67:0c:7f:ce:f1:1e:8b:54:a3:
a8:67:e4:77:09:82:89:56:f8:9c:60:a5:8f:ad:a4:d5:a0:2e:
68:aa:34:34:12:1c:8a:5d:d8:af:9f:b9:82:e3:66:57:3d:cf:
a6:46:2d:3d:62:7a:79:b1:09:52:c7:b4:2d:ed:b4:dc:d8:fa:
f5:5e:57:ea:1c:6a:d5:02:78:12:75:66:bc:c8:2b:c6:4e:97:
8c:b5:25:93:60:89:b6:e4:f9:08:02:44:dc:20:74:41:bd:46:
8c:53:6b:50:dc:71:46:43:69:95:20:10:63:9d:49:06:14:71:
23:c3:09:05:a3:b7:88:51:0b:b2:e9:4f:ce:9a:80:36:e9:7e:
81:f3:98:fd:0a:77:07:6e:a1:68:84:60:4a:28:aa:65:0b:08:
12:ed:fe:5d:c4:0b:43:fc:73:c0:a2:49:76:d1:35:47:b4:9d:
86:9f:3b:f4:ae:f3:b0:9a:39:41:41:7b:72:d1:27:cf:db:78:
96:fd:1a:cd:3b:cc:ca:02:5a:84:aa:b0:48:ce:5c:c2:f6:c6:
d5:f7:0c:b1:69:84:53:4a:01:d6:91:57:e6:a4:d8:ec:03:d6:
4a:21:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:52 2025 by rpki-client