Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: uRWwa7djelhE89Z3js/s9iceHi27Ud+GvzQnNKzjc70=
Subject key identifier: 95:B2:E6:B2:48:83:B0:0E:C6:71:67:36:37:DA:B3:0E:42:0B:18:EA
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0198D54E9F1397D2F7CDB8A0DBBA22B9503E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0A11
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: K4mVP843ajMKjSGXWu0rH+dk5efLmOBGdCz5q9GUO9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9f:13:97:d2:f7:cd:b8:a0:db:ba:22:b9:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=95b2e6b24883b00ec671673637dab30e420b18ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:4c:bb:8a:99:2f:d2:6d:ab:81:dd:ab:98:
a6:58:bb:ff:14:cb:45:74:65:59:9d:7f:18:b6:cc:
d3:11:88:a3:19:d5:6d:0c:5a:38:6d:fb:ad:0c:e5:
3c:e1:6d:07:10:3a:a2:fa:1d:83:12:b3:82:dd:ad:
df:84:3e:08:19:b6:9a:fc:59:1c:aa:85:4c:5b:94:
9d:07:7b:20:fa:24:04:14:be:a8:22:f8:1e:f1:ba:
98:54:66:a9:e2:7e:d0:08:b9:3d:d6:b6:45:8d:20:
2a:08:28:40:8a:fb:23:2f:22:8b:a3:3c:95:23:0b:
45:b2:80:c3:63:85:72:e8:d8:5a:d4:73:e6:b9:ef:
20:3f:5e:5c:50:0a:13:c9:1f:84:3a:f5:1b:12:43:
bc:ee:ba:1a:fe:55:8a:3b:df:e8:bd:57:d9:be:c9:
c7:05:7e:46:ad:9f:05:1c:a2:64:9a:82:29:98:e3:
e2:42:17:56:02:e3:99:db:b3:c9:a5:37:41:e4:92:
69:88:af:ea:2e:f1:c8:8c:75:0e:f6:72:51:bb:22:
2e:16:1b:19:8c:b5:11:bd:bc:a3:52:22:32:e5:8b:
06:05:05:5e:42:36:04:70:dd:cd:9b:db:f2:0c:29:
1a:fe:f7:aa:aa:23:ee:0a:0b:50:78:2e:90:01:61:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:E6:B2:48:83:B0:0E:C6:71:67:36:37:DA:B3:0E:42:0B:18:EA
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:67:e1:cd:67:57:e0:86:e2:c4:98:b8:07:81:7f:e6:25:4b:
88:f3:6f:bf:c0:91:ca:ee:62:cf:cd:4d:15:75:be:0f:56:e4:
ec:ed:b1:ca:11:19:8d:6b:b7:e8:62:10:85:79:c2:f0:23:78:
bd:4d:68:d1:99:e6:dd:04:ab:42:e0:98:60:a4:9e:83:57:29:
20:46:59:bf:b3:87:ac:de:d6:0e:f0:3d:65:1d:fd:2f:48:eb:
20:00:0e:9e:75:1d:e6:6a:44:a1:0d:1e:96:11:17:60:1c:31:
e4:f7:5e:3c:63:7f:94:1a:13:e0:6f:01:39:bf:2f:db:57:68:
bd:6b:23:15:88:fa:0c:17:a5:97:3b:8a:f4:43:71:36:b5:5a:
7c:70:be:01:35:80:60:cf:99:8c:88:8e:62:51:2d:ed:d3:a5:
30:31:53:f3:8c:b8:c3:b4:b1:21:cd:b2:ce:1d:fe:6a:eb:5b:
7a:fb:eb:83:34:13:22:b2:0c:30:96:e4:8f:04:7f:8e:58:8a:
54:1b:a6:56:4d:68:a3:b8:cf:db:ea:35:63:62:06:67:97:ab:
89:10:a8:ea:fd:f2:8d:28:90:b3:39:e6:92:5c:de:44:86:29:
01:4c:25:5d:ee:2e:5e:98:ff:65:a9:f2:c4:e6:a7:50:ef:0e:
9a:f8:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:59 2025 by rpki-client