Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: 6hWKe5bcMnUS4wuIULmdp3++myJUgZWRfBC4FpEvnCo=
Subject key identifier: B8:CD:0F:B8:56:7A:F5:60:E5:C6:D8:85:4E:ED:75:B5:17:D0:2A:28
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 0199233191336FE0838C5D342A1464A1D137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:01:14 +0000
Manifest this update: Sun 07 Sep 2025 08:01:14 +0000
Manifest next update: Mon 08 Sep 2025 08:01:14 +0000
Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: tliSBrPzB6rJuhmVZZB/DzJ7UwF3FW98aH8iBDUn+4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:91:33:6f:e0:83:8c:5d:34:2a:14:64:a1:d1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Sep 7 08:01:14 2025 GMT
Not After : Sep 8 08:01:14 2025 GMT
Subject: CN=b8cd0fb8567af560e5c6d8854eed75b517d02a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:57:45:54:2c:21:39:1f:b9:b7:d4:5d:4c:
2f:10:b8:18:90:7d:73:8f:65:10:21:89:66:36:36:
d3:b2:33:0c:ab:57:73:e4:f3:2d:7b:57:fc:d0:d4:
a6:9e:0c:6a:0b:71:ac:1e:37:12:0e:5c:70:6a:06:
f4:b3:a6:08:6d:02:12:fc:88:87:4d:c2:0d:22:0d:
24:d6:8a:34:9e:db:48:88:b6:53:e8:14:f3:5a:b1:
1b:87:bb:c3:6b:13:73:62:7c:bc:7a:5f:33:11:9f:
ed:04:11:a4:da:7d:83:32:ac:01:8f:a9:fb:61:b5:
7c:24:5b:8f:e8:27:c1:c0:35:5f:94:0d:ae:52:aa:
be:eb:1b:44:1c:6a:b0:69:5f:da:f1:0d:70:12:8d:
97:c1:0d:40:a6:0d:c4:d8:83:3f:71:42:e5:3b:ad:
ea:a8:c6:48:04:ee:1c:f7:ff:2d:52:f4:c4:68:82:
89:5b:0b:a3:2c:fb:b3:2a:22:2e:3a:36:d0:39:41:
4b:a6:b7:c7:d6:77:f8:54:86:50:4e:ee:8f:be:2a:
ec:65:b9:fb:bf:57:46:fc:ba:5d:4b:84:39:ee:36:
b2:f7:ed:5c:d7:38:4b:5f:f4:98:24:ac:ff:dc:ab:
8a:1a:e9:1e:3f:93:4f:9a:09:29:66:f2:b8:87:21:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:0F:B8:56:7A:F5:60:E5:C6:D8:85:4E:ED:75:B5:17:D0:2A:28
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:41:66:3c:be:fa:97:5f:f3:29:56:8d:f2:00:69:b0:b4:c6:
fc:a3:d3:06:89:d9:35:a8:e1:65:74:f8:45:27:42:f6:d0:47:
ca:e9:7e:fd:dc:c1:1a:c0:09:ae:12:72:df:a4:3e:d9:fc:2f:
50:99:ae:1e:33:05:7a:62:70:d4:f3:36:29:d4:a1:9a:67:cb:
2a:3c:98:06:cf:9f:74:50:74:1c:af:ff:61:c8:a0:1c:f7:46:
6b:cf:4c:0d:19:8d:41:75:6f:ed:0e:2e:c3:79:d8:67:88:24:
16:da:07:be:3e:42:d7:14:d7:cc:b3:ef:0c:79:34:2d:b0:7a:
11:26:af:53:2c:f8:b7:63:65:64:55:ad:32:5f:b3:03:87:75:
32:df:93:9d:e2:6b:6f:29:4a:07:fa:31:da:3a:71:d7:24:07:
7c:47:9b:4f:10:e7:f7:70:48:5c:d3:8c:70:09:09:3a:ed:bd:
91:07:52:5c:24:c4:f9:60:8a:15:34:53:2f:73:14:2c:7a:4d:
15:40:f7:24:47:a3:c7:33:53:2c:a2:16:ad:b9:ef:3b:43:9e:
87:fb:95:c3:43:92:b0:30:1f:81:ca:3a:cd:b6:8e:ac:64:a2:
e5:7a:20:14:9a:05:9b:16:fd:c6:95:d5:8c:e7:d0:50:22:6b:
72:6d:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client