Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: U/hzEyctlHeCGAof/dXgUXAPnF9KtogSm01rzINJ7ZU=
Subject key identifier: 2B:1A:AC:09:66:53:37:D7:69:C6:F2:76:E1:93:28:57:58:19:CC:B1
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 01984AAE81C5287C45236251D13EA0A06D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1185
Signing time: Sun 27 Jul 2025 07:00:06 +0000
Manifest this update: Sun 27 Jul 2025 07:00:06 +0000
Manifest next update: Mon 28 Jul 2025 07:00:06 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: JBpTaHC0qy9Xd1dNt73AN/yOWQwwFbp6Df0rytS3rEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:81:c5:28:7c:45:23:62:51:d1:3e:a0:a0:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Jul 27 07:00:06 2025 GMT
Not After : Jul 28 07:00:06 2025 GMT
Subject: CN=2b1aac09665337d769c6f276e19328575819ccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:d5:b6:39:65:9a:1a:6b:fd:ef:d6:dd:37:
e2:d1:41:bd:ad:2d:88:86:f8:a4:e3:83:73:0d:2e:
84:24:60:3c:28:81:e1:0b:03:82:33:51:0b:26:1e:
c3:da:22:60:43:50:22:c8:fc:fd:77:d8:a6:7a:eb:
a0:5a:24:ad:94:d5:67:fc:6b:48:d1:28:35:fd:34:
db:95:39:41:a4:1c:97:82:bf:f9:a4:1c:1e:30:b4:
ff:20:fd:27:59:ef:1c:ca:1e:63:e8:08:a9:8b:37:
20:8a:29:32:66:8c:a4:8b:86:b1:ec:26:4a:af:7c:
36:16:45:56:68:53:3c:51:ea:e9:27:d1:3a:80:f0:
4a:42:91:73:b0:f4:2e:56:c0:92:ba:06:5d:3c:b9:
db:b2:9d:93:d5:e6:ab:23:a0:0f:90:78:25:db:a9:
79:78:50:b5:75:c7:a2:4d:f7:dd:f7:93:5a:f2:b5:
00:95:5a:8a:cd:43:a0:18:9d:ea:12:9b:4a:98:34:
6c:1d:85:1d:fe:61:3a:e6:c2:8c:2a:4b:ad:db:9b:
78:24:09:a0:fd:e1:0c:07:8c:41:77:49:ca:1a:0f:
8b:67:c0:a0:0b:45:5b:8f:d6:7e:8c:ac:0a:b9:69:
e4:8a:dc:ac:c3:70:3e:43:0c:4a:ba:48:ae:22:ba:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:AC:09:66:53:37:D7:69:C6:F2:76:E1:93:28:57:58:19:CC:B1
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:7d:4d:80:14:6f:ee:b1:0e:6e:df:70:5e:94:55:67:77:
5d:3f:30:ae:4a:8d:5c:f1:a9:a2:85:d5:32:78:14:ac:b7:f1:
a6:c2:4c:32:ed:28:f1:a8:00:3b:54:69:63:7a:31:61:03:05:
90:5f:fa:9b:6f:f6:9e:00:cc:0b:a0:7a:91:89:da:e3:47:9f:
ad:d3:02:dd:c3:9c:be:c8:6d:26:ce:23:78:8e:7a:09:65:f4:
7f:19:ac:30:90:48:fc:2a:f3:5d:a2:b7:c1:14:55:c2:e7:9e:
4b:92:d0:c6:31:22:a3:53:0c:5f:f1:b3:16:d3:2a:91:66:60:
f3:fe:61:12:19:6c:d3:90:a6:aa:68:2b:27:b7:61:e9:cb:3c:
82:5a:7c:67:41:18:98:49:be:17:ea:4d:80:15:2d:c1:b9:72:
b3:e4:fb:3c:62:47:20:b4:ae:1a:c8:fd:f6:a2:19:24:39:52:
7a:4d:d9:3a:18:17:41:d6:c1:a4:87:20:23:a8:33:cd:e5:69:
5f:e1:87:fe:46:0f:84:aa:f4:7e:61:ce:f3:02:cb:05:f1:5a:
5e:44:6c:df:ea:f4:fa:5f:8f:90:24:14:bb:42:df:d9:d7:31:
79:dd:6c:81:18:fe:f2:f6:03:72:ca:10:45:3c:ba:44:c9:ca:
64:c9:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:40 2025 by rpki-client