Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: d+FuqnvvZYtfXS12MNBDsXc5wgbtshJJ7KpZeCR25y8=
Subject key identifier: 17:1E:5E:55:35:38:C5:AE:BF:CE:42:D4:D4:D2:98:74:32:84:81:BC
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0199228CFF279589887486FC1ED5D6AF2358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 01C7
Signing time: Sun 07 Sep 2025 05:01:29 +0000
Manifest this update: Sun 07 Sep 2025 05:01:29 +0000
Manifest next update: Mon 08 Sep 2025 05:01:29 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: XxKqGUe3E4G3raO7o1BG+1sasV+mVXUp2cjHwvX13aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ff:27:95:89:88:74:86:fc:1e:d5:d6:af:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Sep 7 05:01:29 2025 GMT
Not After : Sep 8 05:01:29 2025 GMT
Subject: CN=171e5e553538c5aebfce42d4d4d29874328481bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:9c:e2:fc:ab:95:d7:8e:b9:2b:ee:ad:f1:
b2:79:e0:d1:1b:4d:63:db:b5:8d:98:ae:cd:0a:eb:
70:b7:63:73:09:f5:ef:5b:53:56:b5:07:44:e9:86:
b7:1e:1e:e1:43:8b:cd:97:86:e9:6f:8c:fa:0d:f9:
7a:f0:b5:49:a9:08:8d:86:e8:e9:15:17:0a:7d:7f:
51:ec:d7:8d:b8:7e:5d:6e:73:e7:a5:d5:3c:65:e4:
7d:b4:ac:0d:ab:88:8c:f4:51:31:f2:83:ee:17:30:
2f:d8:e6:5e:29:c5:34:66:f5:b7:df:68:e5:de:52:
c5:12:67:e0:8a:c8:a9:71:86:40:0c:65:63:45:37:
f0:7d:11:6c:17:38:90:c0:b6:55:24:5b:15:0c:8a:
17:1e:5f:b7:76:d3:6b:1b:28:78:9e:d9:ec:8b:37:
19:3e:35:0e:d0:b0:b7:41:30:67:4c:23:c9:bd:d7:
65:53:65:11:63:ff:0f:84:3f:59:57:50:69:c2:0c:
4e:07:f8:29:21:fe:89:50:08:74:30:b3:c8:df:87:
f7:1d:5f:95:f9:fb:bc:f7:65:6d:e1:6a:3b:c4:56:
0a:5f:cd:14:c1:92:d2:18:3a:88:b9:fd:9d:65:56:
2f:86:2a:3d:1a:2a:70:19:50:89:29:9c:e1:4f:d6:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:5E:55:35:38:C5:AE:BF:CE:42:D4:D4:D2:98:74:32:84:81:BC
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:68:f1:89:8c:6b:f3:2e:8d:bb:93:7e:c3:1e:36:2b:e2:
df:67:a7:15:a7:2d:33:75:5b:4c:51:83:f1:12:c5:35:31:5f:
27:ed:ca:cf:91:bd:c8:6e:bc:21:5c:5e:1e:55:39:c5:e2:d4:
f6:b7:1f:a7:ff:ce:ba:f4:e5:fb:a5:b9:20:bb:05:a3:7f:51:
28:41:ff:8d:29:2f:90:39:8e:58:22:6d:b6:0a:c8:37:38:5f:
82:31:ae:b3:85:18:28:f0:af:75:b4:cd:98:01:7b:36:08:42:
97:73:3b:f0:40:72:76:eb:7c:c2:d2:d1:99:4d:4c:b5:88:82:
c0:ba:6f:ea:53:c5:4e:48:cd:e7:36:2a:26:9e:73:98:e7:2d:
8a:d6:1d:b6:cc:1c:14:bf:29:63:94:dc:fb:01:44:6c:9c:a6:
e4:6c:49:ef:e2:89:b3:dd:ca:3f:d0:4f:90:c9:9f:b1:f1:81:
11:79:1a:5c:29:ea:5e:82:ad:bd:ff:3a:fb:5d:8c:07:17:18:
20:1e:a7:30:96:76:36:10:12:cb:8a:8b:10:08:a4:21:d9:b7:
f6:bc:60:f2:ee:d5:08:db:c8:97:36:1f:32:a1:4c:d0:07:09:
b0:6c:a0:04:b4:b2:42:11:be:42:12:7a:80:59:7e:9f:a5:6e:
b1:15:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:30 2025 by rpki-client