Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: EEOrDP7wYySKaaX8cjNI6adsZGxtn8bO4pLW49vyAyw=
Subject key identifier: D2:60:5D:B2:F2:3C:09:05:33:8E:CF:1B:CB:9E:B7:C8:E3:FB:54:10
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 01991DD417FFF986C7CB2EA5DD78A237359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1676
Signing time: Sat 06 Sep 2025 07:01:02 +0000
Manifest this update: Sat 06 Sep 2025 07:01:02 +0000
Manifest next update: Sun 07 Sep 2025 07:01:02 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: 1bPCVznCiL7OGHVUY8mVtDiGgpqZHp686cQt0amxD5E=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d4:17:ff:f9:86:c7:cb:2e:a5:dd:78:a2:37:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Sep 6 07:01:02 2025 GMT
Not After : Sep 7 07:01:02 2025 GMT
Subject: CN=d2605db2f23c0905338ecf1bcb9eb7c8e3fb5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:b9:30:e0:63:2d:3c:5f:2f:8b:4e:3c:a9:
65:8c:39:c4:0c:41:9c:01:55:86:fd:39:ec:2b:4d:
11:f2:34:50:53:86:29:c5:ec:0b:a1:44:54:e0:f3:
24:37:0c:9a:f4:b2:5d:db:f1:ba:d9:ea:25:cb:83:
d3:db:f5:66:59:c0:64:e9:96:41:10:03:3d:6e:db:
6b:80:1f:46:d1:01:5f:21:ff:33:37:b0:4e:1d:64:
04:65:d1:da:16:4c:b9:9a:2e:69:0e:39:6b:bf:63:
3c:ad:30:c0:d0:30:a4:53:81:6c:58:1f:42:ba:52:
af:30:1d:78:c1:81:1f:c6:ee:6d:34:b2:e0:58:04:
61:dc:b0:b2:77:28:19:0c:af:fd:cd:cb:06:0c:4d:
5a:16:df:8c:8c:b3:66:94:1c:cc:3e:09:13:64:67:
89:a8:b6:76:c1:de:df:f5:72:b9:0c:5e:14:46:ea:
5b:d5:45:e9:95:bb:c8:04:57:19:0b:5e:d7:dd:1f:
df:64:18:76:18:69:91:42:51:0a:07:47:34:6e:a8:
ec:44:97:7a:56:07:2e:51:fa:87:70:45:fd:45:9a:
c1:09:a6:0c:27:73:a7:c3:50:d0:f0:1c:b2:c4:d7:
e3:f4:d8:a3:b5:0e:92:a3:0e:fe:9e:21:9f:bc:e7:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:5D:B2:F2:3C:09:05:33:8E:CF:1B:CB:9E:B7:C8:E3:FB:54:10
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8a:a8:ec:e0:9a:bb:49:d1:f1:6e:21:d5:5f:67:55:30:92:
dd:1b:c5:4c:46:23:19:cb:02:0a:e0:22:6d:9d:64:ae:39:3f:
c9:c2:86:ef:54:24:2c:1c:0b:11:ee:ad:f1:59:ef:70:04:20:
d9:86:72:2a:0a:4d:35:ab:c1:a5:bc:1a:ff:1b:5b:84:ba:4f:
f1:d6:45:04:06:81:8e:6c:9a:c3:8f:e2:ab:9f:a6:df:03:b6:
3b:3b:0b:1a:fe:22:c7:08:a3:74:48:a2:b5:f3:7b:98:e3:b4:
93:90:11:e4:62:bd:62:48:be:99:53:18:b0:cd:86:aa:f5:d7:
b7:90:eb:78:c3:d5:43:29:fd:83:8d:d4:dc:b1:67:d0:5c:18:
57:ca:ef:de:d2:50:22:3a:62:e9:8b:7b:b2:f2:30:64:42:17:
58:c8:1b:ca:74:e4:1c:d9:b8:8b:a3:08:3e:ab:cf:4b:0a:f2:
fb:08:65:30:34:e0:1e:3d:e5:a4:d0:ce:a8:d5:39:da:21:2d:
35:4c:62:f1:6f:95:67:ad:e2:5b:ac:dc:60:a7:ad:6d:cd:8f:
90:6f:42:06:9b:1d:01:d9:ce:a7:7e:0d:45:e1:0c:6c:b8:2a:
6d:c9:ad:9f:f5:61:ef:4e:39:fe:d4:bc:76:14:f4:df:81:59:
95:b9:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:22 2025 by rpki-client