Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: MG974fD8fnyE9sk1W21M/yD9G/0XtV2wYwpqfJM+gfg=
Subject key identifier: 6E:97:B0:88:5D:53:8E:D5:FD:B4:1B:93:14:46:FB:AE:AF:12:6B:21
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 0198CA5AD7141898326F7CA4749A42BBC6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0969
Signing time: Thu 21 Aug 2025 02:00:07 +0000
Manifest this update: Thu 21 Aug 2025 02:00:07 +0000
Manifest next update: Fri 22 Aug 2025 02:00:07 +0000
Files and hashes: 1: 9kQSFx9NBgdYOUE_u_QQ1xrVHjM.roa (hash: nF34ztaCx4lsDpWaNHXR5tZ2u4WJ9TVd0nOUtCtY/2Y=)
2: d2kR6d3TC7hLx-LY_yPrSHmZEqk.roa (hash: bktunr76fWYhMzD/+mLyc6QoNibWe0J9osON7R46Nkk=)
3: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: 2wr3Ta3mhlTIoLtSaNJOC5l5Cg8nULV1eXCY3tgXCeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:5a:d7:14:18:98:32:6f:7c:a4:74:9a:42:bb:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Aug 21 02:00:07 2025 GMT
Not After : Aug 22 02:00:07 2025 GMT
Subject: CN=6e97b0885d538ed5fdb41b931446fbaeaf126b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:9f:a2:be:33:f3:fd:cf:fb:e6:17:88:28:
10:7a:46:0d:34:6c:c8:5b:9f:17:cc:96:55:e1:f2:
9c:ea:38:b8:02:d6:ce:53:c4:72:ab:53:ee:e0:33:
b6:cb:00:dc:76:31:df:93:4b:67:85:17:aa:7c:f0:
04:d9:21:17:3d:b4:20:2b:12:58:29:e2:5c:24:98:
56:25:a4:6c:ce:8d:99:aa:f3:b3:fc:ca:ec:85:34:
27:56:77:ab:d8:75:ba:a3:fb:5f:34:66:38:75:45:
d7:b3:68:e7:3e:d8:85:88:cd:84:9a:b2:00:9c:36:
b3:9e:2a:8a:66:de:f4:2d:2e:a8:05:54:8e:40:a0:
1c:34:bc:e9:6d:e1:9c:17:02:1d:a0:25:75:f6:c7:
75:8f:ba:92:cf:d4:e7:35:72:bd:71:9a:d4:8f:f0:
00:a7:78:86:21:c9:a7:44:2c:a6:52:d3:e1:8d:4a:
0c:98:24:ea:f6:10:6e:9a:14:90:9b:c3:bd:fa:0c:
52:23:43:a0:e0:2d:66:a3:81:f4:be:b6:eb:20:db:
46:fd:ae:6b:7e:fb:9b:ed:ee:3c:ac:f8:18:64:b9:
44:5d:6b:72:82:d9:d4:d4:42:e3:39:bd:d9:a2:a2:
0d:71:b0:86:96:77:8f:72:f8:c1:59:51:c0:fc:4a:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:B0:88:5D:53:8E:D5:FD:B4:1B:93:14:46:FB:AE:AF:12:6B:21
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d2:68:6f:af:8e:50:d5:0d:32:43:16:f6:00:70:be:47:36:
ba:aa:b2:bc:61:90:61:16:24:ba:be:02:76:a6:7e:70:68:3f:
c2:45:fb:a3:a7:76:6d:6f:40:4e:2a:4e:74:25:d7:4b:a0:d9:
41:8d:67:2c:b2:e7:31:15:47:68:f0:9e:cc:78:83:52:dc:5e:
4e:04:b9:6f:ea:bd:89:16:b1:bd:c0:4f:de:0c:cb:39:32:f5:
63:3b:d8:df:5d:af:5d:e2:c5:f8:2d:26:fb:1f:0e:b6:0c:83:
bf:90:e1:b4:d0:cf:c8:14:1d:56:66:0c:a5:c0:87:10:19:d2:
50:ff:60:41:c1:c9:b5:80:ac:f4:af:12:1c:01:d2:2e:a0:83:
aa:00:ff:08:88:8e:05:5a:16:33:0e:b8:b2:be:03:92:dd:5a:
ac:87:c1:be:ef:15:92:5f:cc:3c:c4:74:ad:04:f9:e3:ca:f3:
d2:d5:10:b0:79:98:92:03:a7:bd:23:e6:1b:fc:e6:a4:0c:01:
24:30:73:c1:e8:f5:03:00:91:ab:ff:86:44:59:5f:0f:5d:40:
1a:ce:ca:9d:14:9b:62:e2:92:55:99:4a:90:56:1b:07:9f:a7:
bb:a4:ed:c9:3d:e2:1b:07:8c:11:74:97:e6:75:2d:e1:c9:ca:
6d:fb:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:11 2025 by rpki-client