Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier: QotyJbXs+RRZlygq4ek2EUG6D+CaGekwo+3KkluF+XQ=
Subject key identifier: AB:B2:E8:43:20:12:41:B5:0B:5F:45:3A:26:8D:8B:15:92:F3:C4:70
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 0198E2D1187E6884C7D9E36DEE849898E314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number: 1653
Signing time: Mon 25 Aug 2025 20:00:10 +0000
Manifest this update: Mon 25 Aug 2025 20:00:10 +0000
Manifest next update: Tue 26 Aug 2025 20:00:10 +0000
Files and hashes: 1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: 5xqkUYbiDBh9nm2V2Qi3btYWRUV5Nj1rkwmWaKjz044=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:d1:18:7e:68:84:c7:d9:e3:6d:ee:84:98:98:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: Aug 25 20:00:10 2025 GMT
Not After : Aug 26 20:00:10 2025 GMT
Subject: CN=abb2e843201241b50b5f453a268d8b1592f3c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:8f:69:c8:f3:79:17:32:70:c9:69:d5:ec:
07:dd:01:9c:94:6b:1f:27:b2:38:43:a1:e4:c9:9a:
9c:b4:da:98:c1:0b:ae:11:32:6b:02:a8:92:24:34:
b9:3c:ce:8c:49:a5:8f:78:62:f4:65:35:0a:c8:88:
18:b4:27:9b:f4:d0:27:98:db:8f:6e:b7:87:61:62:
a1:a3:2b:d5:92:7d:0a:a9:38:6a:27:db:ef:98:50:
52:47:ee:80:57:80:ae:df:7d:04:b9:18:bd:12:b5:
07:50:e4:7c:df:7a:e8:0e:bd:a5:e9:43:8c:02:c4:
94:06:07:12:07:43:f2:42:2b:17:7e:6c:c7:a9:3c:
86:cb:14:7c:a6:83:48:1c:32:c3:c6:94:d4:4f:b5:
3e:1f:1e:a2:50:88:10:63:ef:61:2b:f3:fc:8b:6e:
4c:79:05:bb:ce:3b:5e:c0:ba:76:13:f3:ac:f5:30:
8c:7b:af:56:8e:57:09:02:21:36:9d:9e:1b:b5:5d:
79:35:37:0f:6b:b6:d6:72:37:4f:2c:d6:52:54:be:
a5:36:3c:00:60:da:58:65:4c:e0:ec:67:52:46:ab:
56:65:e0:6d:fc:8c:78:11:f0:31:83:5d:3d:4a:ce:
f9:50:2f:a7:d2:08:23:dd:05:09:36:1d:8b:52:17:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:E8:43:20:12:41:B5:0B:5F:45:3A:26:8D:8B:15:92:F3:C4:70
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:39:05:98:63:96:0e:b2:ea:94:b4:c3:1f:2e:fa:8f:33:
87:89:72:70:4b:67:70:90:6a:97:98:d5:a6:8b:a8:52:c0:72:
a1:62:9a:1a:67:93:07:30:bc:83:7f:6c:cd:25:81:44:6a:1b:
0d:17:80:48:e4:da:cb:83:d8:58:a4:68:d0:dd:20:f1:ba:ba:
1f:02:b3:34:2e:d0:5d:80:2e:6f:21:92:c1:f6:d6:05:d3:5f:
d0:fe:b4:ca:ec:d9:10:a9:b0:f1:4d:54:9d:c4:78:a8:d1:c8:
ed:22:b7:8d:e8:8c:66:e2:88:b1:6a:6d:fb:41:5f:8c:d9:5c:
57:9d:01:8c:bd:2b:c6:ea:93:ba:ff:d1:93:7c:68:f2:94:43:
9b:7e:f1:cd:85:29:53:f9:6b:51:35:86:8c:23:5b:b3:c2:8c:
3c:92:3b:62:0f:5d:5b:d4:66:db:e8:ae:f7:71:39:b7:72:ae:
10:c6:c2:78:20:c0:cc:28:97:17:01:58:be:fc:12:1d:d0:b6:
cb:c0:39:96:e9:78:70:8f:24:55:9d:bd:5f:e9:69:36:3e:c3:
ef:41:34:57:55:14:6c:31:e6:38:e5:0f:0a:67:06:35:ca:6a:
b6:06:40:70:60:ac:9f:43:13:1e:b4:45:81:cd:a9:36:ba:14:
81:59:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 23:28:01 2025 by rpki-client