Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: p8UDGzk8p8YPJ0TIAlfoXeqa/whc24T7cnmt0YbUlF8=
Subject key identifier: 7D:44:E0:14:8E:09:AF:25:2B:05:FD:30:36:D1:90:27:78:87:82:8E
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019847E50040880F287FB315159E7B017DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0389
Signing time: Sat 26 Jul 2025 18:00:46 +0000
Manifest this update: Sat 26 Jul 2025 18:00:46 +0000
Manifest next update: Sun 27 Jul 2025 18:00:46 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: 5eXE/TrTuEcW3Pe9Mbc2nvvw3voLxM89UgZBaKi7w8o=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:00:40:88:0f:28:7f:b3:15:15:9e:7b:01:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jul 26 18:00:46 2025 GMT
Not After : Jul 27 18:00:46 2025 GMT
Subject: CN=7d44e0148e09af252b05fd3036d190277887828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:fa:40:61:a1:60:22:9b:ff:0e:71:d9:92:
57:4d:03:3a:37:03:66:2a:74:72:74:59:c9:fe:04:
47:38:11:7d:9c:b6:b3:c9:c4:d6:fd:89:82:ab:6c:
46:8c:af:04:1f:88:67:6d:e3:b6:06:bf:c0:66:17:
bd:a6:47:73:b3:bf:82:1c:5c:3f:90:37:0b:52:ef:
aa:de:4d:ee:b2:7f:66:22:4b:62:52:33:f5:04:eb:
94:e9:b4:09:d0:d4:ed:57:db:0a:e9:54:9a:30:00:
a6:0b:a4:8d:21:22:e1:fc:5a:72:93:1c:fe:5e:0c:
87:16:05:16:3a:53:be:6a:c1:82:7a:e3:0e:da:44:
1e:be:6e:9d:83:56:71:74:a4:69:99:50:6e:9b:9a:
22:d0:3f:8b:9c:4f:ee:46:41:09:2f:97:87:5f:dc:
3f:53:fd:3f:51:5f:80:5b:85:cd:40:3f:00:e4:c1:
67:37:e7:1c:17:50:d7:3d:a5:d0:c1:d0:cd:a6:13:
38:6a:8c:5e:ac:3f:a7:d5:c9:28:04:1f:88:7a:fa:
80:29:c7:a4:a6:07:15:73:7e:82:fc:85:e2:96:ee:
d8:70:da:89:8f:11:28:e3:47:6b:03:cb:07:07:9f:
3c:6b:63:16:61:e5:82:dc:1d:1d:1a:19:b4:72:22:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:E0:14:8E:09:AF:25:2B:05:FD:30:36:D1:90:27:78:87:82:8E
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:6a:00:b7:46:45:d1:45:fa:52:5e:04:18:70:12:e2:95:
a7:89:1e:58:83:d2:8a:08:a7:ec:57:a5:75:21:c7:a2:3c:70:
c7:90:1b:12:97:9c:dd:4a:a0:3c:c0:20:ba:bd:1c:c9:21:53:
53:d1:10:8c:eb:87:da:91:2b:f4:28:1d:6e:98:73:91:08:10:
7f:f9:0a:16:1d:ee:aa:26:f0:d6:fb:16:1c:a4:60:3b:c1:51:
b9:f7:4d:dc:af:c1:ec:94:c3:d5:a6:e2:17:be:1b:96:17:fc:
b3:8e:a9:eb:33:17:77:fb:0c:5b:c6:c7:ec:cf:e0:07:12:34:
d7:48:17:55:8a:19:21:48:60:2b:e4:51:8b:2b:2d:52:d9:80:
b5:e2:72:77:df:5f:ff:97:33:85:02:1c:bf:b9:e7:c1:2f:a6:
54:f2:38:fd:2d:ab:11:e7:7a:24:18:4b:d9:61:e8:c3:80:87:
30:ef:28:cb:ad:a5:2d:b6:b9:94:56:7c:14:14:71:81:23:e3:
94:b1:a2:be:80:18:25:6f:ca:2c:af:61:46:29:5b:d6:89:5a:
f7:97:30:10:3b:b3:ef:9e:29:70:d1:b6:77:77:e5:9f:84:57:
d1:a9:39:22:fe:fe:46:a8:07:ad:12:2e:b7:d6:b9:76:95:93:
2a:77:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:11 2025 by rpki-client