Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: i6SwBu+POlMV6tQ89Ghje2i2augOyV5BIoE44TdaHK0=
Subject key identifier: 52:BB:22:1E:94:B7:C5:BD:DC:5B:C1:CA:6A:7E:C1:86:5E:CF:24:40
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 01984DB035A4ED2E5293AD675C693B7BF399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0646
Signing time: Sun 27 Jul 2025 21:00:50 +0000
Manifest this update: Sun 27 Jul 2025 21:00:50 +0000
Manifest next update: Mon 28 Jul 2025 21:00:50 +0000
Files and hashes: 1: 1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa (hash: X6damPmptp3XphV2HfGbEnZgUQ5Ok8UVDdDjwWdsAA0=)
2: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: eWbkg484CfuIJ35OG1cEdFv1O96NBBLXMO9lntwDlJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:35:a4:ed:2e:52:93:ad:67:5c:69:3b:7b:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Jul 27 21:00:50 2025 GMT
Not After : Jul 28 21:00:50 2025 GMT
Subject: CN=52bb221e94b7c5bddc5bc1ca6a7ec1865ecf2440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:1b:36:b7:a0:97:ea:e9:6d:4c:97:71:97:
57:f0:fc:49:7a:20:46:1d:24:8e:78:c4:b6:40:60:
3b:90:51:8c:a7:6a:25:92:b8:12:f2:fe:18:95:3e:
c1:62:d4:ee:f4:4f:79:14:27:5a:a6:07:92:7e:6a:
aa:3d:bb:17:25:2b:03:5e:d5:f5:fb:47:4e:eb:99:
98:b9:d8:74:0e:72:bc:94:da:5f:73:98:f0:6c:d7:
28:f1:cb:91:1d:c7:ef:fd:a6:1e:40:94:c8:5a:c8:
d7:fc:95:e7:f0:c4:77:25:61:b0:0d:f3:ca:e5:80:
5e:5b:b0:b4:6c:5f:f3:6c:2a:57:d1:52:24:99:86:
ea:06:ee:b1:da:3a:b6:a0:6d:dc:19:fe:64:12:11:
06:b3:62:20:50:30:b1:66:f1:84:52:aa:dc:ab:8e:
cf:e9:15:ee:2c:90:24:a1:52:41:21:fc:a4:5e:e1:
65:da:90:19:d6:3c:85:23:35:bf:c0:15:68:51:90:
9a:81:26:c2:2e:2e:85:dd:a6:86:56:80:62:7d:ec:
08:f7:0e:51:e6:f9:9b:ce:e9:24:39:d7:cb:47:98:
34:be:78:7d:02:34:49:b9:d0:7f:a1:76:6f:05:2a:
86:79:d0:c0:4d:71:62:b9:2c:cd:80:01:7a:f4:d2:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:22:1E:94:B7:C5:BD:DC:5B:C1:CA:6A:7E:C1:86:5E:CF:24:40
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:90:e0:50:6e:79:41:c2:52:10:5b:82:d9:38:c4:5a:95:
53:24:e3:6b:c5:eb:a9:a4:4e:bc:3c:4c:27:de:d4:54:43:de:
73:b0:66:a8:9d:b8:aa:0b:7b:9f:09:40:dd:b2:ab:45:4e:53:
6b:3d:35:cb:b0:4e:b1:86:d7:fc:d0:9c:0d:6f:ab:1a:aa:19:
34:c1:e1:0b:d7:97:a2:25:d4:40:dc:84:59:09:c3:fd:a4:c8:
fc:a2:47:50:72:60:c8:31:06:75:af:d5:be:5e:a6:f4:31:7f:
7d:ad:1c:bf:cf:d3:5e:96:66:71:ac:66:75:b9:e0:2c:01:e9:
ae:6f:c7:d6:68:95:c6:3a:1c:90:f1:f2:6e:67:57:d8:85:eb:
94:85:4e:2a:9a:ed:1c:97:41:84:eb:3e:c0:fc:7a:23:a9:c9:
c4:cd:be:4d:3c:d1:2b:bd:ee:6a:fc:a9:48:75:48:6f:61:52:
ab:7e:21:32:e1:cc:1d:77:85:11:75:2d:4e:a7:5e:de:bf:f9:
88:83:5f:6e:36:3f:fc:94:7f:95:c6:ec:24:32:8b:75:c1:b4:
e0:f7:a2:a1:d2:e8:9d:1b:35:6c:c8:16:26:16:b7:07:c8:14:
88:62:eb:d1:43:54:65:b8:0d:62:10:46:de:1c:88:a5:e9:f3:
e8:63:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:03:01 2025 by rpki-client