Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: FmFvTRv9fIf/7OOUQ0NJ+byOrjpzEZFs479qchFdaEQ=
Subject key identifier: D5:A9:C8:EA:F7:BA:EA:30:78:39:3A:0B:B6:3E:FE:86:EA:8C:33:FF
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01984776E7DEF9C9053FED84D3D98C9E1AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0583
Signing time: Sat 26 Jul 2025 16:00:31 +0000
Manifest this update: Sat 26 Jul 2025 16:00:31 +0000
Manifest next update: Sun 27 Jul 2025 16:00:31 +0000
Files and hashes: 1: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (hash: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=)
2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: M0b3W0sE7O7rnX91DWnzPYhgpmB82iA2djHjelp1olA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e7:de:f9:c9:05:3f:ed:84:d3:d9:8c:9e:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Jul 26 16:00:31 2025 GMT
Not After : Jul 27 16:00:31 2025 GMT
Subject: CN=d5a9c8eaf7baea3078393a0bb63efe86ea8c33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:78:0e:83:7e:83:8e:db:63:a1:54:fb:26:
6a:4e:b7:19:38:5a:af:7e:0c:a9:94:3e:3c:b7:c2:
65:b9:88:f2:81:03:5d:47:4e:87:09:2b:49:75:11:
de:57:48:c4:51:49:04:22:1e:12:d4:85:8b:dc:77:
39:f4:b1:9c:b9:82:2c:2c:d0:85:c3:3c:66:b1:d7:
d4:f7:6d:c8:0e:18:28:8e:37:68:1c:5b:d6:c9:c2:
e0:8e:8d:99:4c:e3:74:88:9f:8a:2c:3b:7f:c9:2f:
8b:4d:77:d3:51:d3:65:5a:6a:c5:20:49:e5:21:5b:
d3:3b:14:33:9a:8e:a4:55:ce:65:56:73:34:45:66:
86:f7:f2:30:54:57:89:67:6b:6e:71:d8:3f:39:49:
fd:f2:ca:8e:19:dc:3e:66:f1:35:54:e1:f9:15:8a:
30:d9:a8:59:46:aa:fb:4f:90:45:8c:6d:b3:f9:5f:
81:6e:6c:0d:d0:09:dc:d0:9a:14:27:a9:ed:a0:e6:
01:3f:04:76:55:5e:d0:a6:08:7e:09:4b:1e:73:4e:
3f:6e:6d:09:7a:09:3a:88:c7:6e:1b:52:32:8e:7b:
ea:80:8a:44:f5:4d:60:13:a9:38:d5:e4:fb:66:67:
65:94:1e:c2:fd:7e:a9:b1:a3:c1:90:54:8a:d9:48:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:C8:EA:F7:BA:EA:30:78:39:3A:0B:B6:3E:FE:86:EA:8C:33:FF
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5e:d2:fa:f4:5f:f3:ef:b1:16:2b:70:ad:a5:1b:5c:f1:c5:
68:d5:01:a4:e6:0c:de:2a:8f:49:04:dc:6b:76:a5:a7:84:24:
39:02:d9:bf:1b:82:5e:f3:cd:33:11:42:09:bb:00:19:f7:d9:
4e:0e:54:1f:cc:fb:ac:b8:c6:01:cc:18:22:95:19:3a:6c:3d:
96:19:96:f9:05:5b:cb:31:5b:8e:3e:2b:65:5f:f0:e0:76:8f:
ff:06:4e:d1:65:aa:fb:45:67:45:e3:74:14:85:44:66:76:3a:
9f:28:ff:4d:8b:d3:93:76:a7:46:37:a4:7f:53:44:92:3a:98:
53:cf:e6:01:73:aa:a5:96:0b:2d:c3:b9:48:61:f6:94:75:7e:
f1:fc:b8:d4:3a:2e:34:7d:7e:3f:82:60:8f:85:ce:93:14:55:
3c:31:09:e2:c8:23:1f:46:64:db:78:c6:bb:ca:5f:2c:2f:d1:
e1:24:56:49:3a:0b:bb:db:d6:c3:4b:91:4b:a7:94:fd:28:5a:
43:d6:e0:d7:fd:57:08:f5:2d:5b:c8:9c:14:52:c3:f7:b4:39:
2a:1d:5a:c0:4b:02:a1:2a:4c:30:48:a0:ac:ce:37:43:69:a7:
c7:3c:5b:22:c0:f5:2c:39:a1:92:d5:2a:9d:ed:0d:50:e1:99:
70:69:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:04:36 2025 by rpki-client