Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: x3CDLbDfc2q5Z4F7ecUv8kqVhqaAQpJ3L/ynS8CyZF4=
Subject key identifier: 75:CC:F4:0A:9D:FB:8B:9A:32:26:6D:2B:E7:53:81:55:8F:12:25:3F
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0198DA3D51840480FD2EFB2AD88E1FAF641D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0FB7
Signing time: Sun 24 Aug 2025 04:01:48 +0000
Manifest this update: Sun 24 Aug 2025 04:01:48 +0000
Manifest next update: Mon 25 Aug 2025 04:01:48 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: Oo75JVObbl+ysNhmHYFTBQHHoSJ84njXcMkxu4gwqcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:3d:51:84:04:80:fd:2e:fb:2a:d8:8e:1f:af:64:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Aug 24 04:01:48 2025 GMT
Not After : Aug 25 04:01:48 2025 GMT
Subject: CN=75ccf40a9dfb8b9a32266d2be75381558f12253f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:d3:51:a3:4f:81:7b:92:3e:41:71:81:ea:
9a:30:a3:1b:28:7d:fe:db:e4:16:1f:ae:81:dd:76:
d8:f6:fb:ad:91:a8:12:f3:32:22:d6:05:6a:ab:d5:
d1:4c:48:cf:14:3b:f5:89:e1:b5:cb:df:89:9e:76:
12:26:0d:34:62:53:4c:fc:62:8c:e9:19:c5:03:82:
1a:9a:e7:4b:13:bb:2f:11:0e:d0:0b:fa:c9:a1:49:
5a:93:79:76:eb:82:42:8a:77:ce:46:43:70:a3:d4:
55:0e:01:70:35:4c:66:2d:1f:c8:46:4d:a9:2f:77:
d5:12:9d:25:5e:25:10:52:80:e4:2b:f9:a8:29:af:
23:67:22:52:9a:c8:58:9e:b6:70:6b:98:ea:22:7f:
b6:60:d5:b6:f1:82:9a:2f:c0:f5:18:22:3f:b7:35:
5a:4f:36:52:05:98:77:44:f9:e8:36:39:1f:bc:b8:
d7:01:14:3b:82:6d:d3:40:2f:7a:e8:97:0d:12:f3:
d9:cd:40:94:08:26:f5:25:52:5d:43:e7:fe:87:37:
85:43:07:58:13:da:92:0b:8b:7f:f8:ef:f7:0f:48:
6c:48:47:9b:15:a9:7c:1f:03:f8:3d:69:f2:f3:03:
42:53:dc:c5:04:4b:e0:5f:d0:3c:42:63:db:c1:28:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:F4:0A:9D:FB:8B:9A:32:26:6D:2B:E7:53:81:55:8F:12:25:3F
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:90:64:5d:b1:a1:9d:2f:b7:ad:85:71:51:b4:fa:fe:a3:
16:fc:e0:c8:d0:47:94:21:70:0a:18:8a:0b:94:1e:78:99:97:
85:9b:3f:5b:d8:9e:b2:eb:9d:08:9f:c4:52:0d:20:f7:64:ea:
23:b1:ad:61:5b:65:d9:ca:86:4b:c8:27:5e:8d:90:ef:32:26:
6f:75:a7:f6:06:e2:da:d6:7f:0a:56:59:08:0e:7e:be:63:92:
d8:43:8b:0d:d3:a4:8b:78:5f:09:3f:4e:94:fb:9b:59:c6:e2:
c0:8a:1d:a7:7b:d9:49:88:f5:91:01:27:40:d8:9b:ea:e1:4b:
a9:47:a6:4e:b0:d0:67:f2:82:1e:4b:5d:c1:60:61:f2:3e:65:
48:02:44:b6:eb:bc:3e:53:56:39:27:fa:65:d1:2a:48:d4:11:
84:8f:f9:47:db:11:b5:1c:0b:08:5d:9a:3a:0e:4c:ed:a8:22:
e5:b7:f8:18:04:bc:69:67:a0:6b:98:fa:e5:0d:e3:d3:ff:5b:
20:1e:3b:cc:b1:a9:ba:40:b0:f5:02:40:e4:32:c6:03:fd:24:
c8:f5:c9:f9:70:57:29:81:5e:7b:6e:f0:e7:17:53:ec:ba:91:
db:77:06:3c:04:ae:73:46:a4:4c:1c:2e:fb:2a:5e:ca:25:bd:
4f:bb:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:23:54 2025 by rpki-client