Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: rnDIqakZTGG07sklYMZKGR+Zs4pvc0cHzbWLnlsSZlE=
Subject key identifier: E6:9A:A4:CA:96:96:AD:78:AF:33:6F:39:3E:B8:30:07:5E:2A:FD:E9
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 0199228CCBE5EDFEE9E40BD3B3ADD4E3A783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:16 +0000
Manifest this update: Sun 07 Sep 2025 05:01:16 +0000
Manifest next update: Mon 08 Sep 2025 05:01:16 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: p/WfXH4R3iZx5Pk0o2F/e0mkKa+mhi/5McE1iOY6BYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:cb:e5:ed:fe:e9:e4:0b:d3:b3:ad:d4:e3:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Sep 7 05:01:16 2025 GMT
Not After : Sep 8 05:01:16 2025 GMT
Subject: CN=e69aa4ca9696ad78af336f393eb830075e2afde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:01:8b:75:0e:c1:87:5c:ba:ba:40:fa:34:
b5:ee:b0:2a:2e:d2:2d:dc:6e:d8:bd:ec:b4:03:d6:
c4:94:3f:aa:8b:c2:82:a3:76:09:c9:ab:ff:56:70:
ce:2e:74:9f:3f:b4:24:ab:6b:b8:e8:96:56:f6:bb:
2e:37:d5:59:fe:cc:e5:10:8a:d6:da:c8:f6:81:01:
5d:c0:8f:26:a6:6f:2a:27:17:c2:9e:6b:c3:15:03:
d2:ba:8d:8a:d2:e5:97:1a:59:1e:68:d3:51:f3:e8:
10:aa:e7:f2:4a:ef:60:bc:0e:27:61:e6:97:c8:48:
83:cd:b0:c7:87:9a:98:52:c9:18:b3:0a:5b:c6:d7:
2a:75:1b:c5:3c:09:aa:6d:ce:e8:f8:67:2c:25:49:
04:8b:be:99:99:df:59:df:46:62:08:27:dc:08:fb:
ce:71:83:df:dc:f6:5d:da:16:5b:e9:7a:22:e8:1b:
49:5f:ca:32:bf:cf:07:54:0a:f3:73:fc:f5:74:3e:
8b:0e:11:49:a9:f5:41:ac:71:c3:05:c6:1b:8f:5b:
15:25:8b:b7:08:eb:cf:d7:f1:28:39:4a:ba:9e:2c:
33:8b:e3:ab:fd:f8:02:50:9b:9a:d1:21:29:51:cf:
cb:66:d1:9a:8e:ba:34:47:ea:85:1d:51:39:4c:33:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:A4:CA:96:96:AD:78:AF:33:6F:39:3E:B8:30:07:5E:2A:FD:E9
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:99:52:5e:fc:b6:8e:48:3a:8b:5d:03:ad:61:c4:31:55:
63:cd:eb:0f:a5:37:5f:a1:8a:f3:68:8b:8b:2a:b7:bd:fe:5a:
e1:e7:f1:d2:5c:ad:6e:8f:51:9a:4c:51:df:61:c7:a3:77:35:
f4:78:6c:c7:af:ca:60:3b:e2:a6:c7:83:25:d1:d2:2c:d7:ce:
9d:3d:ed:37:6e:09:ce:22:3d:69:ac:44:e1:31:0d:e7:19:80:
c8:74:44:88:a2:c9:ca:0a:b2:c4:31:62:4f:25:d1:f8:ab:7f:
4f:c9:6e:98:d6:62:1f:8b:50:7c:eb:85:04:09:fc:e6:b5:04:
31:30:d2:3f:71:93:72:ef:27:a1:cf:f4:d5:b2:22:98:03:81:
15:5b:a1:85:c8:60:c1:c8:20:42:a2:16:83:d0:92:a2:44:dd:
71:55:48:53:0f:10:a3:57:83:55:ca:a9:d8:73:e5:ec:b8:5a:
8e:64:c5:2e:d1:56:fe:d5:9c:01:c0:cd:ab:32:22:aa:a5:a2:
10:fa:5c:76:35:2f:ff:5b:ef:af:30:ec:62:55:84:2c:d0:17:
66:26:43:17:2d:4f:48:4a:32:0e:2b:dd:c1:b7:a1:8c:78:83:
cc:13:08:7a:81:c3:29:11:67:a9:3c:fa:1b:3a:6d:f1:5a:ba:
b5:09:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:08 2025 by rpki-client