Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: bfTHaWsbzCnscY28qsBi+FQxK3XONRXTSDQ2fmHFrMk=
Subject key identifier: 42:A1:CA:65:02:D3:43:DC:88:6D:0B:F8:C4:9A:2D:5A:37:3E:9F:58
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019848C067BE55A4CF26D67C99B5A3A0AD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0AA2
Signing time: Sat 26 Jul 2025 22:00:25 +0000
Manifest this update: Sat 26 Jul 2025 22:00:25 +0000
Manifest next update: Sun 27 Jul 2025 22:00:25 +0000
Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: Eda4BArEcWh4LEivFIeYahQW02h7wYlXnYMRYqVxtF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:67:be:55:a4:cf:26:d6:7c:99:b5:a3:a0:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jul 26 22:00:25 2025 GMT
Not After : Jul 27 22:00:25 2025 GMT
Subject: CN=42a1ca6502d343dc886d0bf8c49a2d5a373e9f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:1c:cd:d9:29:51:df:fb:41:b5:c2:13:67:
0c:ec:d4:f8:21:fb:dc:e7:a1:0d:de:e2:a0:45:a0:
d9:92:ce:8a:5c:5e:91:e6:26:53:44:4a:c5:61:93:
8d:3e:0c:6c:b0:00:8f:f1:18:29:0a:b9:9a:f6:69:
aa:54:c9:9e:23:4b:b1:1a:06:67:e9:83:de:71:df:
6e:aa:6c:6b:7f:d6:4d:00:ff:27:9f:bc:a1:42:9f:
4c:91:38:00:83:42:4b:c0:a0:c6:25:26:bf:46:5f:
c0:49:e0:30:64:58:9c:83:f3:2b:8e:1f:3d:7c:55:
0f:9d:5d:f8:e2:5a:47:d4:8a:14:f6:34:bc:46:af:
5a:39:40:d0:75:e4:dd:a2:40:33:48:34:72:94:96:
8f:17:b3:52:55:e1:37:dc:68:ee:0e:e8:e9:91:d9:
0d:4b:af:bc:35:2c:a3:15:8f:c9:b8:a6:19:7a:07:
b3:84:57:39:e2:93:20:01:8f:be:b0:0a:0d:66:50:
83:11:53:a8:9a:fe:aa:22:20:e2:a1:d9:62:ff:e0:
7b:72:e7:29:4a:28:da:a8:56:3a:e6:15:cb:1f:7b:
8b:1e:65:4e:4a:d8:f0:75:38:3c:0a:40:ed:3f:ec:
b9:c5:18:2f:e8:c5:b2:5d:ee:09:74:c8:11:dc:f4:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:CA:65:02:D3:43:DC:88:6D:0B:F8:C4:9A:2D:5A:37:3E:9F:58
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:8b:ea:46:c6:32:ff:5b:20:7f:34:f7:95:e8:d8:7f:54:
a6:5f:bf:f1:9f:e0:a9:72:b8:8c:13:db:e5:e4:09:66:0e:ac:
8c:ae:79:fe:82:4c:d7:19:3e:8f:fb:f4:e7:17:47:0e:d3:ec:
d3:0e:96:05:26:29:3d:2c:35:3e:9c:38:ba:9f:74:71:ff:96:
71:13:74:b9:a0:9e:1b:93:24:38:74:98:1a:80:e3:96:7d:fd:
fa:ed:90:95:72:75:f1:09:09:74:23:80:42:63:bc:c9:70:f9:
ec:a4:ea:4c:8c:f2:29:1a:f8:87:b6:a6:a6:bd:7c:13:7c:6f:
62:0b:57:e9:eb:62:4b:b1:27:35:8c:98:03:c5:00:2b:e9:44:
ae:f9:a0:44:c4:00:08:68:e6:ed:7f:3a:c5:e2:e3:9f:dd:a7:
4d:c7:ed:b8:75:7a:cb:f2:4e:4b:ee:c1:d9:7e:67:11:ba:ac:
2a:3c:e7:74:41:0c:a4:95:cb:38:ca:15:17:c1:98:8a:05:2b:
40:e1:21:f4:41:ae:6d:28:6d:df:d1:b2:7a:b7:d1:e8:55:fe:
a8:ec:bc:cd:b4:34:30:12:b2:95:79:9b:46:b8:0e:d0:96:4a:
5e:b1:b2:55:28:ec:bd:b3:d9:5e:ac:b0:42:cc:39:0f:2a:68:
db:26:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:42 2025 by rpki-client