Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: tTG4zDfhIM/QRG55OKI/8/WWDRi+aePviSkFFLGvQRM=
Subject key identifier: 4C:FF:41:53:88:A7:87:1B:94:7C:D9:69:2F:1E:DC:DC:6C:6C:0D:A1
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 01984A4156F9A722A04E677B4DC81E4277A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 0ED4
Signing time: Sun 27 Jul 2025 05:00:52 +0000
Manifest this update: Sun 27 Jul 2025 05:00:52 +0000
Manifest next update: Mon 28 Jul 2025 05:00:52 +0000
Files and hashes: 1: cXNS-jhbDVvMG8hSqbBOLCvMoSQ.roa (hash: ttyMv3492QrBBmeGVtvaGpTbwOtDA0bKvFjMI/PqMtk=)
2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: GahuyQII+XWe53q9gsUPzSn8Ho65KWDgVNdtaQ2Lni0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:56:f9:a7:22:a0:4e:67:7b:4d:c8:1e:42:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jul 27 05:00:52 2025 GMT
Not After : Jul 28 05:00:52 2025 GMT
Subject: CN=4cff415388a7871b947cd9692f1edcdc6c6c0da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:5f:e9:cb:2c:98:44:ce:2e:cb:46:32:73:
05:bf:4c:23:f3:b9:af:c1:87:b6:fe:06:b5:42:29:
80:1e:e8:44:1f:f4:7a:43:4f:2d:0d:b9:3f:c3:55:
c0:a0:7a:d9:c6:a4:f6:54:ee:90:fc:68:70:ac:35:
9b:b2:25:69:48:a3:63:05:51:ac:10:36:f8:d4:ba:
e1:c5:be:ff:99:f4:b5:34:76:cc:9c:7e:2f:6e:9b:
65:db:4c:f1:15:d9:b5:3e:bf:d8:a8:12:1b:a0:c1:
3e:65:66:62:a1:cc:b9:dc:e5:27:8d:45:60:13:26:
04:e4:bb:53:ac:b4:9e:18:2a:f4:0d:d4:af:eb:06:
67:53:7c:ff:2d:b4:dd:1c:94:9a:25:17:11:b9:71:
02:7e:fb:3e:30:cb:37:15:3b:58:58:f2:30:0f:96:
c5:dc:92:2f:55:62:3e:fa:6c:65:f1:d9:4d:39:eb:
4c:f4:12:ec:3f:fa:f9:40:99:db:e0:dd:2f:1f:bd:
2c:74:35:a4:db:d1:39:33:40:b9:29:24:49:b4:c8:
0e:28:09:94:14:e2:4b:83:91:0a:d5:26:03:ef:f1:
37:2f:da:49:ea:d0:cb:ee:00:af:a7:da:f6:3b:d9:
67:df:75:06:12:29:e8:eb:42:90:9a:b9:e3:72:79:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:41:53:88:A7:87:1B:94:7C:D9:69:2F:1E:DC:DC:6C:6C:0D:A1
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:53:13:79:b6:98:07:39:e4:3b:3d:0d:85:95:25:ce:9f:
52:85:17:1b:79:ad:fb:6e:b7:24:b4:ae:b2:b3:1d:f3:f2:32:
fc:c3:6a:27:23:45:e8:74:fa:38:c6:97:76:53:3d:e1:1e:02:
3d:ef:99:78:6d:84:f5:6f:1c:c7:87:f5:12:dc:8b:12:89:28:
3c:21:93:9a:77:60:1f:b0:92:d0:40:eb:67:56:31:89:ad:77:
a8:a3:7e:53:9e:be:52:a8:f9:eb:79:c6:b2:51:fd:0f:51:03:
6a:a0:74:3f:f0:e4:99:04:69:46:26:94:50:b5:93:91:c8:b0:
55:e8:47:53:43:4a:57:9d:45:56:77:c1:6b:93:bc:7c:1c:4f:
cb:7d:54:46:8a:b6:e7:7d:78:0f:09:45:e2:2d:bd:c2:6d:77:
9a:d1:c7:b1:b2:31:48:bb:90:93:5f:bb:ef:88:86:b0:b1:34:
34:27:b4:20:25:70:9f:f2:57:7c:6b:1e:0e:3a:71:13:1f:65:
10:94:15:34:23:02:0f:5a:e3:58:8e:03:71:ac:0a:3c:6a:0e:
a9:9d:8a:db:db:fe:80:c7:93:dd:b6:30:62:d3:4b:95:32:f5:
be:b4:28:4e:84:7c:12:4d:c6:27:77:cd:aa:1a:e1:8e:db:20:
5e:2f:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:08 2025 by rpki-client