Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: PeT3xBZO4AiSX3CtNAuTP/wQkTQIaccveLRwa27cVYE=
Subject key identifier: 9D:79:08:89:01:AA:F8:AB:B5:C6:51:1A:3F:17:29:46:07:A5:21:D3
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0198D5838A7D207E0806D109CE42E9719DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 11CB
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: /7NyhZRyKkeOwRn4cy2QcNqCTLdJ7pAGi1FqrnnvTq0=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:7d:20:7e:08:06:d1:09:ce:42:e9:71:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=9d79088901aaf8abb5c6511a3f17294607a521d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:70:20:0c:d5:a5:f9:4c:7c:1a:c6:75:df:
59:10:be:bd:fa:0c:f7:f0:59:a2:d1:1f:e8:df:80:
83:7c:f1:d6:9a:70:85:15:11:05:a3:80:a2:e0:57:
16:75:01:11:07:4f:b8:ba:16:78:5b:3f:be:3a:ed:
3f:05:74:bd:08:55:b8:8c:88:ff:9a:96:c8:c3:2f:
b1:27:8d:59:13:70:17:d2:09:62:6f:8b:1d:78:a7:
cb:8c:cf:e8:64:f7:a4:de:af:bb:f0:a0:17:1f:f6:
98:72:0f:4e:65:a3:a6:00:31:35:91:6b:9b:cb:73:
c1:b3:0c:ba:7f:ec:69:f6:50:3e:f5:37:0a:32:2e:
95:d1:06:b9:ec:ad:57:58:80:90:52:73:4a:0d:66:
fe:68:18:9d:df:11:88:11:c1:ce:5a:d4:55:4c:33:
58:29:b6:d1:f5:9c:60:2f:b8:39:14:4d:f1:29:8b:
ba:be:b9:bd:fb:92:98:f6:cd:5c:c3:bd:3b:96:2e:
21:9f:ef:64:62:0a:2b:6d:a1:98:a5:08:04:e4:6d:
4b:3d:82:ad:08:10:4c:1b:1d:db:01:4b:2f:57:3e:
30:ba:18:38:3b:0a:33:c4:c5:80:80:7a:07:f9:88:
33:fc:43:ef:cc:85:f6:a9:a7:22:6d:fb:8a:d7:65:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:79:08:89:01:AA:F8:AB:B5:C6:51:1A:3F:17:29:46:07:A5:21:D3
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bc:42:be:fb:a9:61:c0:05:47:02:a2:29:0f:cc:56:79:f1:
b5:72:4c:f4:f4:89:7b:26:6a:68:30:88:87:5f:d3:95:23:b1:
8c:7e:58:57:23:eb:b0:b2:c8:ed:78:27:6a:c8:f9:81:f0:69:
4a:1d:98:94:26:f9:ac:8f:25:25:90:0a:fc:03:e3:32:2a:76:
39:27:0f:c0:8b:e5:56:7f:12:c9:0f:05:3a:2d:35:ed:80:64:
b7:d2:ae:c0:af:15:69:70:15:5d:46:90:08:84:6c:eb:c4:ad:
e4:35:6a:db:a5:ec:ae:d0:ad:a9:47:53:4d:69:5a:72:66:c1:
ef:70:b9:02:2a:e8:8d:9b:c5:3c:16:7f:a9:bd:b8:f9:19:27:
e3:67:ed:dd:e1:5c:d6:66:b6:14:56:5c:0e:42:0c:60:fb:ae:
44:51:71:b6:55:5a:75:74:dd:e4:92:95:78:e2:57:7d:19:9b:
c3:81:70:d8:d8:85:5e:08:5f:bf:72:e9:c9:0a:7f:ec:cc:ec:
c6:d2:69:98:1d:56:c8:96:27:62:5a:63:17:e8:c1:e9:d4:bf:
28:e3:b8:a3:c0:f0:51:31:cf:b1:da:da:d9:ab:64:09:b1:a0:
c1:0c:37:22:23:92:53:d8:f4:84:76:c1:7a:28:13:e1:23:ff:
ab:8a:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:20 2025 by rpki-client