Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: VVjztnytgphllOIDq/4XanK1CYD+pt9FtHBOCjEVCSY=
Subject key identifier: E6:E9:7B:A4:89:F8:AA:13:51:7A:98:9B:D1:76:48:CB:81:97:5A:E6
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019845BF28DDA27CD729DD220231306284A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 08:00:12 +0000
Manifest this update: Sat 26 Jul 2025 08:00:12 +0000
Manifest next update: Sun 27 Jul 2025 08:00:12 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: g3/11S+KouzmpVlWZM/QJsVJ7ZVoaNfk/+M1qnUETXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:28:dd:a2:7c:d7:29:dd:22:02:31:30:62:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jul 26 08:00:12 2025 GMT
Not After : Jul 27 08:00:12 2025 GMT
Subject: CN=e6e97ba489f8aa13517a989bd17648cb81975ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:8c:59:44:2a:bb:f5:5c:f6:ea:f2:1d:4c:
18:5d:f0:2f:9d:96:08:df:ac:44:b1:cf:98:b6:78:
1f:f5:5e:0e:3b:27:e8:3d:96:75:61:93:e0:dd:b6:
20:db:77:e0:5b:1b:63:6e:a0:9b:5d:cb:15:16:f4:
0c:fa:92:3f:50:93:56:b3:ba:dc:e1:85:a0:07:32:
d1:4d:cf:1a:ec:4e:af:eb:69:38:89:56:ce:91:53:
a9:d7:8b:64:41:8e:b1:17:58:76:bb:7e:17:a7:fc:
c4:91:c4:02:46:fc:8e:8a:cd:73:16:a2:79:14:f8:
9b:a7:62:76:fe:4e:d1:b1:77:98:70:1f:d8:f9:6e:
23:dd:bb:86:89:9e:32:b4:dd:23:1c:7e:32:89:65:
2f:01:7a:4b:00:7d:d0:68:c0:4d:7f:a6:00:02:92:
8f:e6:47:60:13:b5:04:9b:42:91:d3:ca:10:cf:6a:
9d:01:14:ef:de:b6:65:73:a7:56:48:ac:4b:3b:4c:
c4:67:4b:7f:c7:97:8f:54:b2:e4:bc:94:88:99:21:
f5:cc:e9:b5:ec:6f:82:04:d9:27:6e:ca:aa:48:28:
61:7f:ff:59:19:aa:00:9e:6d:93:26:0e:72:52:64:
4c:6e:77:cf:1d:03:af:95:c8:ff:ba:7d:35:b5:d3:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:7B:A4:89:F8:AA:13:51:7A:98:9B:D1:76:48:CB:81:97:5A:E6
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:54:c0:e6:14:16:56:46:33:4a:08:2b:a1:b0:54:53:5a:
6c:95:70:3f:ba:6b:a1:f7:3c:73:98:29:58:de:11:23:73:11:
a5:9a:ec:29:18:5b:35:2a:52:2d:0c:66:2e:f7:de:63:a3:7a:
50:39:11:43:dd:93:a5:a0:59:8a:c7:3c:7e:53:ee:43:d5:99:
ab:df:37:98:61:33:fa:e9:92:a8:31:a6:23:b8:ef:10:ab:16:
d7:fc:e7:4f:7a:e3:bc:4f:3c:bc:bd:17:f8:2d:8d:b6:c2:6c:
2a:77:4c:24:90:1c:87:e7:17:45:07:36:ee:31:3f:6c:c6:b9:
eb:ae:da:a6:40:22:51:57:5a:87:0f:53:65:16:de:3a:5e:b6:
a1:9e:a9:9a:6d:2a:b3:d6:4a:19:4e:52:3a:23:db:ac:16:ab:
16:03:94:40:e5:35:61:0c:60:99:b3:bf:ea:59:65:bd:fa:89:
a9:44:03:f1:f5:2e:09:1b:bc:27:00:84:83:0c:d3:ed:e7:d9:
e6:05:95:e5:c5:7b:bc:80:29:da:e1:a2:f4:d9:f5:1d:2f:16:
ce:e3:be:ad:1d:41:ad:96:14:8b:af:92:70:f0:4c:ba:08:64:
8f:ec:d4:19:c0:7f:6a:7d:13:0d:74:c4:1f:e1:5e:35:18:49:
23:fc:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:49 2025 by rpki-client