Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: jiQHYpvNdTutXPxNDEfN8ZW1C9FwYHoXlyp13or2wHg=
Subject key identifier: 34:76:63:32:BE:0C:61:88:86:D3:9D:1E:03:68:A2:3C:01:8F:21:54
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 01992B8FD04DA66D120574230DCD45E08BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 1118
Signing time: Mon 08 Sep 2025 23:01:09 +0000
Manifest this update: Mon 08 Sep 2025 23:01:09 +0000
Manifest next update: Tue 09 Sep 2025 23:01:09 +0000
Files and hashes: 1: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (hash: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=)
2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: O6pNi5HdcTPIOG5I0nJei6K8flUMJLIx0S06vT/Casg=)
3: dM8kA9UdpYik4eGdd4p2YObVlEA.roa (hash: 09Lj5oy/dbzOsXRPbe2C4Tko7I3Jb+mI9jtmELQT9g8=)
4: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:d0:4d:a6:6d:12:05:74:23:0d:cd:45:e0:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Sep 8 23:01:09 2025 GMT
Not After : Sep 9 23:01:09 2025 GMT
Subject: CN=34766332be0c618886d39d1e0368a23c018f2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:f7:18:44:d7:e0:04:52:8d:41:3b:bb:ea:
92:e9:c2:ff:b7:d5:ff:0b:cd:da:15:0b:49:4b:2a:
c0:bd:49:dd:2f:1c:0d:a2:e1:c9:cf:bb:15:4a:fb:
29:82:1f:31:14:75:74:f1:69:0b:a8:2e:0c:e3:d5:
ff:6b:e5:33:25:f7:a2:d7:47:28:3c:71:c3:ad:65:
4e:a1:48:ee:c7:93:68:28:e6:fc:6b:af:01:f5:9b:
88:08:b8:a4:fb:a5:b0:2b:ed:d7:d2:78:ee:3a:da:
e8:10:11:6f:8b:b9:bc:d0:1b:99:d7:ff:46:31:83:
26:8e:65:39:2e:01:ea:7b:b4:c1:c3:99:42:ee:8b:
ff:c6:89:f0:b1:65:98:76:56:81:be:45:85:06:5e:
5c:b1:72:11:a8:af:50:a7:bc:bf:35:7e:28:43:bd:
95:f1:c1:4a:8e:38:ba:ef:56:34:2a:92:43:04:0a:
f3:cd:19:ce:6b:b7:50:64:17:c3:2c:7c:2b:3e:d4:
1e:91:8f:a7:f9:27:4f:39:22:05:1d:3d:dd:fa:76:
2d:e4:63:0c:9c:59:b4:3d:7e:a1:06:39:6d:1b:bf:
c9:6a:70:e6:cf:5f:1f:68:48:9a:fe:68:2a:8c:e6:
6f:9b:fa:95:53:88:87:6a:69:30:84:d8:06:85:6a:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:63:32:BE:0C:61:88:86:D3:9D:1E:03:68:A2:3C:01:8F:21:54
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bf:58:60:30:08:10:2a:ba:86:a6:10:aa:6b:0c:8c:ea:76:
c2:6d:be:b9:68:83:a1:d7:fa:e1:8f:1a:ac:29:8b:07:c1:ac:
84:67:f7:25:01:cf:06:71:50:22:5d:e8:88:e7:01:d3:ec:c5:
b8:a0:77:8f:73:79:77:ee:af:d4:a9:37:94:30:65:74:1a:d5:
11:08:db:80:79:ef:7f:4a:7d:c4:11:62:e3:17:ec:3d:cb:3b:
a4:1b:c9:02:78:af:7a:ba:28:bf:4c:fc:c5:ce:75:94:c5:fd:
81:50:a8:98:8f:6a:34:51:de:a4:a2:f9:eb:58:6e:32:1e:57:
7d:33:23:5c:bc:7b:c8:f7:d6:8e:11:4e:cb:bd:3d:2b:50:9a:
28:8c:e8:c4:ae:ee:7b:9f:e2:86:bc:f3:c8:41:1f:b0:b7:4d:
04:fc:e1:69:c8:a7:60:86:1a:10:22:bc:62:46:45:bf:46:b6:
6d:7c:a5:e7:c6:5a:83:c1:bc:f9:96:68:b8:07:73:6e:ec:8b:
0e:7f:de:5c:be:34:a4:aa:55:89:3a:e4:8b:2b:a1:d0:8a:25:
67:88:38:8e:82:f9:b1:24:6d:97:46:8d:20:b4:be:79:8e:a9:
99:34:e5:ef:90:36:3d:10:e2:d5:2c:eb:8c:9c:c0:9e:c4:12:
71:f3:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:10:31 2025 by rpki-client