Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: flR1+M5DDTtPYc0vTKOEkvRK4epIZ9hFua6zCWRtvwA=
Subject key identifier: 58:AD:A9:E1:DA:9A:7F:33:5F:73:E3:AA:08:E3:91:91:6B:96:ED:9A
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 019927E98EA4BE6464C5259CC98D12820F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 06:00:41 +0000
Manifest this update: Mon 08 Sep 2025 06:00:41 +0000
Manifest next update: Tue 09 Sep 2025 06:00:41 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: dihrb7iWgfQcik17s9lKi437hyyiAxpZminiB3qRkz4=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:8e:a4:be:64:64:c5:25:9c:c9:8d:12:82:0f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Sep 8 06:00:41 2025 GMT
Not After : Sep 9 06:00:41 2025 GMT
Subject: CN=58ada9e1da9a7f335f73e3aa08e391916b96ed9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:47:86:82:51:73:2e:ae:57:ca:13:52:00:
56:ad:8e:f6:c3:18:f5:6f:71:37:eb:03:37:30:04:
5f:01:20:9f:6c:e8:38:bb:ad:05:66:d5:57:26:20:
15:48:e7:2b:78:e2:89:e3:49:65:cf:0e:05:99:f2:
cc:82:b3:ee:39:72:7d:04:31:63:e6:98:54:1a:ce:
60:9a:fa:43:ae:00:1d:6d:e3:29:6d:3c:2d:cb:f0:
78:62:68:b8:ce:2b:04:50:6e:1b:45:27:39:c6:f2:
04:7a:15:da:c5:01:22:5a:45:fc:20:cb:3e:57:05:
24:2c:fd:2f:d4:a6:03:d1:d1:02:f3:67:76:82:e7:
16:27:c9:9d:aa:aa:7f:75:27:ef:75:84:ef:e8:8b:
e8:97:0b:d1:68:4c:70:a8:1b:dc:34:36:3b:41:e9:
f7:ed:53:a6:8a:1c:4b:82:cc:2d:6c:16:c4:ab:c7:
53:28:98:f0:63:f1:54:cd:ae:85:68:6b:62:34:92:
41:6c:8d:40:a2:29:52:98:8f:97:43:65:51:d0:47:
9d:1b:09:9c:25:65:ff:4c:cc:20:21:77:f9:d2:75:
9e:52:be:c7:26:72:e9:95:cd:bd:a9:07:86:56:2e:
28:dc:89:8b:53:bd:c6:45:b0:8b:a4:c1:17:cc:5f:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:A9:E1:DA:9A:7F:33:5F:73:E3:AA:08:E3:91:91:6B:96:ED:9A
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e5:ab:3d:3f:85:5a:cc:60:18:87:af:09:6a:52:dc:ae:89:
70:c4:9c:a8:a9:04:5d:94:5c:f6:b9:f8:82:15:50:d4:47:04:
b1:df:e4:44:6d:47:14:3a:56:47:c2:05:8b:f8:b9:6a:3e:c0:
57:0c:71:4c:21:16:99:21:84:fa:f9:b4:c1:39:7a:ea:a0:50:
b2:01:54:f5:21:eb:fd:1f:a2:63:20:b7:ba:3c:f7:9f:81:0d:
b7:1d:ae:b1:44:74:89:2d:50:16:73:66:5b:36:90:b1:eb:35:
36:eb:03:eb:93:48:ce:90:fb:3e:d2:a9:9b:64:e5:21:0f:6f:
7d:d0:7c:0b:4c:4b:13:66:b9:16:cf:64:7a:ab:f7:87:f1:bc:
71:85:57:6c:ce:71:fa:4f:76:b7:ab:6d:3c:4d:a1:89:1b:05:
09:c8:b7:6f:d6:67:0e:56:d8:d9:d1:0a:c0:48:3c:bb:7a:17:
e6:fb:eb:e8:32:85:65:fe:c4:86:e1:57:19:de:13:38:e7:32:
cb:a9:6a:99:c7:a4:bb:0e:4b:ba:fa:5d:f4:a2:b6:d0:53:17:
15:1a:cb:b9:d8:8b:e9:53:43:ef:b5:e3:32:d9:5c:b3:05:d7:
21:1a:81:9d:39:27:2a:d9:1b:d0:ce:49:f2:3b:1a:80:dc:c4:
91:62:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:11:34 2025 by rpki-client