Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: PGKFRZVAkVtJgv7bwvdtxdl+9+tKSUZLF9ni6qZ6z0w=
Subject key identifier: 52:DA:ED:A9:27:12:E8:41:6A:1E:DF:42:4C:58:56:BD:CB:5E:26:54
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019961A23051EE22DD0859C971CEAFC70E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1690
Signing time: Fri 19 Sep 2025 11:00:43 +0000
Manifest this update: Fri 19 Sep 2025 11:00:43 +0000
Manifest next update: Sat 20 Sep 2025 11:00:43 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: llQDorxrQjyZX3czwgybqYolGjb+QwTHOg3EbWNlzOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:a2:30:51:ee:22:dd:08:59:c9:71:ce:af:c7:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Sep 19 11:00:43 2025 GMT
Not After : Sep 20 11:00:43 2025 GMT
Subject: CN=52daeda92712e8416a1edf424c5856bdcb5e2654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:3a:aa:4a:42:0a:a3:33:07:99:59:f1:91:
20:79:24:9e:6b:2a:5e:53:71:59:ae:ea:ef:55:e1:
0c:33:cb:dd:7c:ad:76:cf:f6:3f:b5:68:9e:ee:c4:
11:de:5d:16:f3:a6:68:8d:f4:02:3d:e7:a5:0e:16:
d8:e0:2f:61:02:76:19:0b:0c:b5:3c:7a:69:ab:42:
25:62:54:6f:08:9d:c8:4f:04:51:78:e1:90:97:f4:
6d:c5:ee:91:01:0b:80:22:f5:c1:a8:5c:07:5d:91:
b3:65:f6:e8:52:cb:ce:11:74:87:89:e3:cb:93:eb:
cd:0c:98:40:fe:b3:2d:2a:76:07:9d:ba:e1:86:ea:
58:d4:f5:ba:3f:ad:b3:6c:5b:62:37:40:28:ef:6c:
6b:fd:59:6e:34:ba:32:b8:69:46:52:87:e3:59:9e:
e6:da:6f:36:37:b1:cc:36:08:d6:3b:e0:05:db:e1:
e6:70:c8:cb:94:2f:83:d7:45:a8:40:3e:f5:15:cb:
17:bc:e8:65:f7:66:07:f7:6f:02:87:0f:d6:a1:7b:
d0:3c:d4:f8:e3:3c:70:76:c8:18:0f:9f:19:59:c6:
97:0b:e2:b6:b4:16:61:ea:ca:bd:ab:6c:15:99:cd:
1d:7f:28:07:79:97:4d:fc:e1:66:ba:99:e9:32:4a:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DA:ED:A9:27:12:E8:41:6A:1E:DF:42:4C:58:56:BD:CB:5E:26:54
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:79:b0:f7:81:3a:2d:91:c6:12:a0:8f:2a:6e:9a:67:69:
ba:40:92:da:28:1d:4c:0c:77:d8:85:4b:fa:a0:d4:25:d9:68:
e1:97:13:61:a9:9b:9a:7d:58:a5:92:17:af:7e:6c:ac:f9:b8:
cf:e0:c9:ce:85:81:f3:3a:3a:b0:a6:03:de:04:9c:5f:31:62:
1b:d6:6b:79:5b:1d:be:9a:7b:3b:80:a3:99:cf:fa:e2:e2:2c:
fe:6c:25:54:76:06:7a:ed:c4:e1:4c:4e:b5:f3:75:6c:ad:83:
5b:f7:d0:98:1f:f6:1f:d7:28:0b:63:bc:23:01:93:2c:e5:7e:
4c:da:87:b2:a7:b9:10:9b:17:a4:dc:db:bf:00:9a:b9:99:f6:
47:50:71:77:3e:e8:6a:45:e1:7c:f0:a1:a1:ec:99:9b:41:3f:
33:d2:45:ec:d8:f8:35:70:ff:8f:34:68:0a:9e:24:19:3b:99:
74:ab:be:8b:69:e5:56:f6:7a:eb:b4:47:e8:53:43:96:c8:91:
00:a7:fe:3c:a6:6e:93:4b:c8:09:a2:f8:f1:c8:25:92:4d:2a:
81:de:1c:52:a2:6a:3f:7d:af:9d:24:dd:35:c6:ca:54:2b:5a:
84:62:0d:5f:86:3f:60:20:46:9d:b5:a5:8e:f4:2c:e4:65:6f:
89:ba:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:11:33 2025 by rpki-client