Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: +SJFgZ8IzJYMqiTy3s4PuaPuDqSXBMcK/LEDshgoUy0=
Subject key identifier: 06:34:D3:C1:48:81:6A:CF:FA:D9:39:29:CF:9E:AD:F1:56:22:AF:D1
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0199307EC13A76CAAA2A3F2F2DE98118C32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 22:00:37 +0000
Manifest this update: Tue 09 Sep 2025 22:00:37 +0000
Manifest next update: Wed 10 Sep 2025 22:00:37 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: 1MiMouvi9eRQZnNk1ToFOsXfUTlJ4Il7IYEdDibN8tA=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:c1:3a:76:ca:aa:2a:3f:2f:2d:e9:81:18:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Sep 9 22:00:37 2025 GMT
Not After : Sep 10 22:00:37 2025 GMT
Subject: CN=0634d3c148816acffad93929cf9eadf15622afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:39:e5:9a:f9:63:5c:3a:c6:38:4b:62:ac:
98:9f:39:ae:8f:b2:12:0e:3b:60:9b:5d:d7:c1:1f:
04:9e:4b:fa:38:2c:ff:a2:7e:d9:70:9e:b4:d3:7b:
22:b2:d2:4e:dc:ea:0a:d1:c9:fa:2e:a9:7f:bd:5b:
29:b5:12:5d:2e:58:c8:34:88:11:38:f8:ea:52:9f:
5a:80:b5:d1:89:b0:79:ca:62:e0:7e:1c:5a:d0:d6:
f8:ba:50:fc:79:fb:25:9c:62:69:f1:6a:56:22:4a:
80:78:3b:8e:c5:82:f7:2f:bc:12:0d:01:bb:63:81:
82:3d:34:ba:b4:c1:63:13:1a:66:63:d8:47:48:b3:
dd:cb:87:e5:04:29:5e:95:64:f1:96:22:76:8d:02:
3a:cd:c8:e7:cc:f4:0f:fb:18:df:70:e6:e6:f3:cc:
64:4f:8a:77:e3:cc:0d:8c:ba:be:c9:39:26:e8:c4:
7f:9c:b2:bb:38:8b:a7:4d:b3:aa:41:83:57:df:33:
bf:2d:0d:be:0b:5e:69:08:1a:a1:65:77:61:22:13:
75:8e:74:06:07:21:29:a5:af:85:23:27:09:8a:0c:
1c:8a:d8:57:31:86:28:25:b2:9a:ae:25:e2:f2:b3:
23:82:76:0a:2e:26:90:ae:02:57:95:a2:b6:44:8b:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:D3:C1:48:81:6A:CF:FA:D9:39:29:CF:9E:AD:F1:56:22:AF:D1
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:0a:dd:a4:6e:4b:65:a9:03:69:19:cb:92:da:31:af:7d:
87:fc:bc:f7:08:77:c7:bd:c7:ca:3a:30:e4:fd:28:b2:96:2d:
ec:ef:a4:8d:76:f2:95:13:8c:84:2d:0b:79:77:64:44:62:4c:
0d:1e:7d:f0:d5:26:9d:2e:e6:b5:8b:e6:00:bc:35:4b:40:be:
6b:6b:09:56:a0:31:b4:47:c0:24:8f:5f:56:cd:2e:e2:ad:75:
51:7e:2c:cd:50:d4:c3:d3:bd:13:db:57:aa:dc:b8:c3:d1:15:
1f:23:e8:bf:04:02:e2:dc:81:a7:d4:08:f2:fe:68:0a:d9:64:
64:01:f9:36:32:6c:ba:a3:02:07:02:4e:ab:61:f6:4d:a6:cf:
1c:ee:6f:a7:ab:ee:3e:00:61:5a:72:0e:86:a8:d1:f3:7a:d7:
49:a9:75:8a:76:19:a2:a3:9e:24:38:b4:23:1a:bb:ae:8a:1a:
a5:8a:7f:9c:0c:b3:1d:0e:96:44:50:1d:99:31:ba:0c:81:11:
28:fe:91:4c:d5:b9:16:e6:02:dc:6e:22:49:f5:11:83:b9:fd:
1d:ee:74:3f:aa:87:07:43:43:ff:ea:44:99:92:11:47:42:5d:
1d:06:5a:6a:91:b3:aa:e7:0d:d0:45:bd:a4:b4:1b:66:c2:1e:
68:45:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:58 2025 by rpki-client