Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: zzJz1XpXEuBU3L+6Won54PfS3fCT13AMQnDeZ40ViAI=
Subject key identifier: 8C:75:87:8C:0D:F8:F1:BB:07:31:A0:52:68:C9:4B:4D:ED:01:20:1E
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01984A0A0A7EB066751A4B8AE625D8A4E889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: I8gZZCHkylfdPj8jX8OlAuHWFS8Z31CQTzoey7UY7uk=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0a:7e:b0:66:75:1a:4b:8a:e6:25:d8:a4:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=8c75878c0df8f1bb0731a05268c94b4ded01201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:8d:1b:c8:36:e8:ef:eb:4e:b8:f9:34:36:
1d:d9:fe:41:9a:60:86:26:be:f6:00:2a:6c:6f:89:
35:ae:fa:4f:17:b5:59:ec:ed:1d:c4:12:1d:e7:03:
9b:ba:08:af:83:da:a7:e1:b7:d6:6d:8b:c2:be:6d:
ea:1a:29:26:a2:aa:d4:02:ab:70:d9:11:d9:8b:13:
e9:b7:bc:dc:a8:b7:3e:80:b1:f3:fc:89:fd:43:2e:
0c:9e:9a:68:d9:59:5c:97:e1:8d:61:d5:a9:57:bb:
47:c0:7b:10:02:1b:f5:6c:2b:a4:8a:15:c7:06:1b:
62:08:fb:2f:e4:47:1a:02:10:c9:5d:f9:fc:bc:ad:
bc:cb:92:b3:91:25:8b:35:79:4f:28:c0:fc:9c:1e:
6f:40:74:14:aa:ff:3d:2e:a6:51:b5:c5:f5:5c:4e:
a9:66:da:6b:ce:7b:2c:b9:c8:45:6c:22:db:7a:c4:
b4:5b:bc:69:3a:39:31:b3:d4:8e:d7:de:fa:2b:05:
9c:5c:02:28:e0:b3:0f:06:e4:4d:be:1f:54:1f:ab:
c2:43:ac:81:5f:fc:5f:b3:60:eb:fd:b0:b7:7d:20:
da:fa:c2:0e:6c:21:2f:61:d5:10:ff:7c:c5:d0:5b:
87:93:fb:2b:e8:e2:d3:94:fa:2c:e8:81:ac:eb:73:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:87:8C:0D:F8:F1:BB:07:31:A0:52:68:C9:4B:4D:ED:01:20:1E
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:18:c6:a4:48:f5:96:4f:50:3e:4d:b8:70:aa:bb:9b:2f:77:
07:53:41:d4:3b:d1:5a:dc:df:29:30:e7:23:7a:75:53:ec:3f:
3e:4c:a3:01:13:87:0e:f0:8e:42:ba:6a:7a:e6:77:20:31:b9:
3a:30:87:fa:ce:be:7c:8b:f2:2e:06:65:8c:ff:ae:01:0a:3a:
5e:60:bb:52:0a:ee:67:7f:99:8f:71:16:8f:14:22:19:91:80:
57:0c:58:e8:57:5d:c6:04:ab:e7:47:24:8f:4a:81:31:36:75:
00:33:6e:27:f5:c5:f1:94:17:6b:4c:70:25:73:c7:72:81:74:
df:b9:09:ba:76:c6:94:91:f4:f7:12:ff:f6:14:e5:7e:b0:93:
d5:50:11:41:b4:af:01:b9:b0:b5:8f:5f:ce:6e:c3:89:30:99:
eb:2c:85:84:89:28:3b:54:a8:2b:0a:a1:87:26:6f:cc:a4:f5:
de:4c:e2:4b:5e:41:6b:34:75:6e:f3:5e:6a:34:40:31:32:40:
24:b6:29:12:73:37:36:17:e0:eb:af:e9:c7:12:42:f8:e9:46:
c0:a1:6e:92:43:ff:a6:74:44:df:f7:17:c0:2b:52:3b:e5:2a:
09:37:e1:cc:60:73:57:d3:bb:11:f0:a6:0e:6b:ec:a2:4c:73:
b9:3b:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:39 2025 by rpki-client