Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: Aj5yItz4k1rW8B4Gd48g3ERbDNhbnSeI+SgsmifOzV0=
Subject key identifier: 3B:70:C6:AA:FD:A3:45:35:FE:42:91:A0:05:9A:FD:5E:C1:97:B9:5E
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019921B24EEF2D107C1CF76555EC508444A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:37 +0000
Manifest this update: Sun 07 Sep 2025 01:02:37 +0000
Manifest next update: Mon 08 Sep 2025 01:02:37 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: WxBMU3EHm8N8eVv0E9xTv0yBOui8exTSdj2wyVliL58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4e:ef:2d:10:7c:1c:f7:65:55:ec:50:84:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Sep 7 01:02:37 2025 GMT
Not After : Sep 8 01:02:37 2025 GMT
Subject: CN=3b70c6aafda34535fe4291a0059afd5ec197b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:7a:46:2e:f7:6f:29:36:29:e5:da:66:e3:
53:93:c2:eb:a5:5c:03:40:13:f1:f9:2c:1e:70:b4:
d4:a1:19:2c:27:8e:a6:cd:37:61:84:2f:c4:bf:81:
dd:17:e4:b8:80:ba:89:f4:46:38:a3:9d:cb:cf:35:
15:94:d5:ea:7e:95:ab:cf:a2:92:fc:5c:86:f0:48:
64:05:8f:29:16:f7:d8:70:a4:b6:d3:bb:01:80:8e:
e9:e9:14:92:06:80:08:36:79:b3:70:f3:ea:2a:50:
35:f5:36:0d:5d:e6:b4:cb:c1:5c:ab:04:87:46:aa:
6a:ed:8f:dd:1e:13:0d:fb:6b:58:e8:66:84:dd:28:
57:41:bf:72:7b:2a:06:3e:61:60:f2:ea:d1:dc:6d:
90:ba:08:4e:9c:f6:e0:fd:6f:4b:20:05:20:48:ae:
53:44:33:97:cc:13:9e:ed:81:37:7d:3e:f5:90:8f:
4b:d9:c6:ba:6d:ff:29:0c:79:cd:3f:b9:62:97:6c:
59:fc:f7:19:6b:70:73:06:65:bd:71:cb:1a:07:b6:
31:31:64:83:8a:19:7d:d2:55:54:88:08:8d:bc:7e:
ac:83:8a:d6:ec:e5:dc:92:1c:79:67:1d:14:75:45:
54:de:8e:b2:f1:41:ab:a0:95:96:7b:b1:72:cd:3e:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:C6:AA:FD:A3:45:35:FE:42:91:A0:05:9A:FD:5E:C1:97:B9:5E
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:21:5b:77:81:bf:2f:a7:16:c1:8d:4f:92:13:64:f3:ca:
88:59:4a:cc:5e:d6:2e:31:e4:f2:97:67:58:50:60:0b:5b:08:
aa:14:7d:8d:19:df:f1:c8:b3:00:d5:7c:b8:be:d3:b1:99:df:
cf:34:c1:1d:b8:7d:4d:65:69:e5:9e:10:e8:e6:64:78:49:3e:
d7:b2:dd:99:47:40:88:aa:27:44:ce:f7:af:9a:cb:63:fa:fe:
12:95:c8:98:b7:40:c6:d2:d0:b1:fc:e8:3b:55:85:97:a1:4a:
18:ae:9e:fa:7a:20:da:17:4d:51:4e:02:7f:a5:7e:c9:27:e3:
6c:db:90:6d:13:df:d5:07:0c:2f:68:cd:ef:89:bb:94:bb:e5:
8f:13:d4:63:e8:06:e7:aa:74:f4:87:75:ec:37:4e:32:5b:5e:
e9:7d:62:e4:a8:7b:2c:71:ea:94:09:67:b8:32:ae:06:60:2b:
d5:10:fa:76:dc:cc:c8:c7:fa:d8:da:d0:e1:1c:cf:77:36:b5:
92:c8:6b:7f:a7:21:3f:16:05:19:a5:f6:1c:97:8b:95:84:62:
f6:c7:8a:d1:0d:c5:3f:16:f1:19:c0:f0:dd:c5:97:38:b7:e4:
1b:f0:2a:cd:22:ca:4b:5e:46:2e:30:72:61:06:92:2e:92:0b:
8a:86:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:05 2025 by rpki-client