Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: CdrwaMlWzlp3tB+vflCQcd1owSO/oNMKG2i9clPuc48=
Subject key identifier: CA:87:98:A4:CD:97:B6:C6:CB:2A:D5:50:62:76:C9:B1:4C:C2:13:09
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 0198D54E9131DD803DCBB04B1A5B8A35E47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0E8C
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: MGFa296Kl+6uoVXKc0Y+NRq2hMW/tkdy4aKCCi7UJEs=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:91:31:dd:80:3d:cb:b0:4b:1a:5b:8a:35:e4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=ca8798a4cd97b6c6cb2ad5506276c9b14cc21309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:4f:56:22:3b:a1:34:28:0d:70:57:9d:88:
70:6e:32:69:ef:7a:e7:17:0d:06:c5:ec:68:fa:06:
7f:74:7e:f9:78:55:12:25:53:f5:1c:fc:c1:a5:37:
7c:c1:fb:e0:ce:1b:fe:11:9e:3f:31:ab:17:60:f2:
c0:b2:79:3a:ca:7d:68:c2:d4:54:73:90:69:68:bb:
1a:9f:d1:24:7c:b7:97:96:2b:6c:7a:c9:8f:54:0f:
c5:48:d3:4f:aa:46:cc:7c:5e:6c:e5:86:fa:0c:02:
5e:97:da:11:69:f8:d4:2e:90:59:20:ec:46:30:b2:
dc:9f:9b:84:9d:30:58:24:8a:64:9d:38:d5:be:08:
9c:9e:0f:6a:40:8b:29:46:9c:b3:ae:4c:e7:0b:18:
78:ba:64:1a:93:f9:9e:0a:07:0c:76:58:8b:c1:2c:
1b:ce:eb:a4:04:f6:43:94:8e:03:e0:02:81:b7:27:
f4:69:ed:a8:3d:f1:92:1a:c1:d9:6e:2c:c7:89:d1:
f2:8a:55:93:2b:af:f2:63:1d:7a:b2:9e:2c:19:86:
65:20:ee:18:3a:78:29:7a:38:36:21:6d:22:8b:d8:
d2:4a:7a:e6:a6:10:9e:c9:c5:d1:89:e8:6f:3a:3c:
44:39:f0:54:7a:45:c5:02:fe:0b:5e:76:28:b2:f2:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:98:A4:CD:97:B6:C6:CB:2A:D5:50:62:76:C9:B1:4C:C2:13:09
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:e6:57:c5:80:2b:aa:f8:da:05:4e:13:4f:4e:e0:5b:1f:
49:71:54:59:46:51:f2:df:84:ff:b0:57:fa:8f:76:f1:d6:01:
55:f8:63:66:48:16:3f:5f:3d:4e:e7:6e:03:a6:c4:ae:78:11:
e6:90:ae:bc:fb:f1:b8:8d:eb:af:60:12:45:6a:81:17:8a:7b:
7c:0f:51:3e:da:45:b0:2f:93:87:62:57:55:df:a5:c3:4f:a6:
9a:46:5b:7f:28:ff:c4:ed:4e:4f:4b:5b:89:fe:c1:ea:ba:5f:
9c:f4:e4:d0:06:56:72:c6:f4:86:8c:bf:7c:9a:26:a9:6c:ed:
a4:a5:9e:5b:cb:de:f9:02:20:54:b7:07:53:1c:c0:86:40:e1:
a1:ca:ad:d5:dd:4d:c2:a0:f9:05:f3:1e:fc:0c:2b:ae:d8:84:
2f:b8:0b:95:33:59:16:c5:b6:fd:d1:49:1f:19:5e:f1:89:00:
52:0c:66:c5:2e:f3:30:f3:8c:b8:23:79:00:dd:16:1b:ce:29:
ed:1e:6f:f5:95:f8:c6:6f:b8:22:61:34:96:26:47:ea:2a:6a:
7b:da:42:a5:53:66:3f:cc:c0:5c:3f:59:cc:6c:ec:1a:c4:82:
ad:5c:ab:1f:f1:d4:a7:78:f4:23:64:a8:6c:df:19:80:71:2b:
53:0e:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:44 2025 by rpki-client