Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: 5m65sT+n1q+LnAOO6ZRVtJKS9GOims3ncY5tsVOTY78=
Subject key identifier: B6:B9:69:1B:96:D8:14:DF:23:72:D7:DE:48:CD:90:6A:E4:52:C7:85
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 01984A09CB28C4B79A19A9A47FD5B55CE4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 1090
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: eKGC+sEp42RVFWpc6vK1M+83NFSzRNAW1EjFOyEOiZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cb:28:c4:b7:9a:19:a9:a4:7f:d5:b5:5c:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=b6b9691b96d814df2372d7de48cd906ae452c785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:3a:11:b7:0c:72:b1:b5:a9:c8:14:98:79:
3d:e0:66:cd:ba:58:b7:a3:f3:71:20:49:86:a8:63:
1e:d9:26:57:fe:e1:a9:70:a3:95:27:05:03:2c:ff:
90:37:aa:55:bd:0e:61:13:6b:e8:f8:6e:da:67:28:
85:f6:3e:f4:74:c4:32:dd:5d:34:a2:51:e7:4a:26:
80:0c:20:73:0c:87:65:05:23:bc:45:f6:cc:56:e1:
74:6d:44:0e:8e:4b:c6:06:e4:a9:4d:1c:4b:a6:5c:
c8:ee:f6:9a:02:c6:fe:16:38:19:8a:58:5c:fd:7d:
f6:76:f3:25:89:d6:fb:af:35:90:f3:2e:47:23:0b:
18:08:77:32:b1:15:79:93:f0:a9:10:97:d5:6d:67:
65:a3:0c:55:6f:09:af:66:13:9d:c8:c8:d6:6f:a9:
d9:9c:08:fe:c6:f6:8b:fb:27:0c:fd:52:d6:ee:d0:
d3:8e:7e:4a:5b:f8:47:b1:52:83:f2:3c:87:2b:d3:
46:db:b4:81:06:d9:62:9f:b8:8c:c0:09:42:91:61:
ba:a3:75:53:42:e9:03:9f:f2:e8:fd:3c:8d:75:ba:
44:dc:55:ce:6b:9c:ef:b5:cf:11:9b:d3:cc:3b:65:
ea:c3:51:d5:73:0a:88:af:70:05:e3:b4:c7:c9:d1:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:69:1B:96:D8:14:DF:23:72:D7:DE:48:CD:90:6A:E4:52:C7:85
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7b:b6:01:93:ad:48:f4:00:3b:e9:35:7b:8f:e3:27:62:f6:
0a:64:45:91:dc:98:75:1c:51:6d:d4:07:0b:c6:2d:8e:4f:c7:
36:91:4c:e6:1b:25:b0:52:95:3d:27:b0:2c:6b:f8:4c:ad:c8:
2d:f0:0e:c9:71:89:aa:38:9f:49:d5:5f:50:c4:4c:e2:8e:b9:
f0:18:2e:5c:d6:16:75:8e:63:e7:5c:6d:05:21:c5:53:a0:09:
9a:19:4d:05:25:d0:24:ee:4a:7a:a1:50:38:35:3b:79:c3:d8:
50:08:a6:93:59:2c:24:35:f2:2f:d5:d9:58:9b:49:65:f7:11:
be:84:95:8d:cc:4f:10:02:f8:b8:b9:96:13:1d:8e:f4:a9:6d:
25:f0:b2:2f:81:b8:00:79:ef:67:92:2f:22:5b:a1:30:c8:b7:
57:3d:34:86:4f:61:f2:1b:16:7a:a2:06:99:b2:57:34:9c:63:
d5:cb:8e:6e:01:9f:cf:8f:c4:a2:13:28:a8:74:91:2d:e9:fd:
15:f8:2e:b7:d5:f1:71:b0:52:77:5f:1c:27:ac:af:34:58:62:
b1:4b:dc:c0:02:de:0b:ee:c1:16:e4:c3:38:67:6c:8a:42:ed:
08:d5:ba:d8:a1:86:b2:f3:75:98:dd:c4:0c:a7:c6:0c:bd:59:
90:20:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:11 2025 by rpki-client