Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: xjwxaQZ7+ScIxgvWNzyIXGmbiL7uhUmVEPIgFAxwzsw=
Subject key identifier: 7F:AB:1C:44:E7:A3:22:25:31:A8:30:D8:04:E2:8F:65:49:BA:72:16
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 0198D4DFFB164361B29DC8A55F6356AEE2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 04B5
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: rp8vOkI9UXT8laGU1DW1kk3oQGxjOXsAYyJj3vM0pQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fb:16:43:61:b2:9d:c8:a5:5f:63:56:ae:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=7fab1c44e7a3222531a830d804e28f6549ba7216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:0b:14:e8:d4:fc:ce:a7:4f:fd:d3:02:13:
0d:13:f3:aa:42:60:46:54:e6:8b:99:b8:6f:78:37:
6e:98:99:a0:62:de:c2:ec:59:04:dc:d1:7d:33:89:
67:c0:f9:34:01:91:58:78:05:9e:14:7b:eb:3c:95:
56:ee:80:17:ee:65:cb:0e:e4:ae:96:76:21:7c:d5:
73:91:f8:28:56:ad:cc:3d:d8:f9:cf:e9:b6:8f:fa:
92:49:5e:6c:00:a4:69:18:8b:85:b3:a6:95:72:18:
0d:35:e2:79:2f:f6:88:b8:83:81:13:81:9e:82:f7:
62:f6:05:e2:a0:ff:19:93:ef:b8:cc:53:2a:5f:58:
0b:13:a5:05:1f:3d:a4:b5:53:34:65:b7:8d:3e:57:
10:7a:f2:9e:d7:58:ed:5b:53:69:e6:64:27:9b:73:
7c:8d:d8:9b:6b:7c:4d:53:27:5c:ae:e0:66:8b:55:
68:6e:45:7c:7b:26:a8:9a:7a:4e:64:9b:95:94:e6:
05:ac:13:8f:ba:ab:a1:9c:75:90:39:80:63:9d:fe:
f6:78:7e:04:3c:5d:fd:c9:2f:b1:9e:90:eb:8c:e0:
d9:e5:5b:7b:ef:b1:b5:cd:e4:97:15:3e:95:07:08:
75:c4:2c:32:73:6d:a4:26:98:73:c9:a7:06:2a:76:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:1C:44:E7:A3:22:25:31:A8:30:D8:04:E2:8F:65:49:BA:72:16
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bb:c6:ea:2e:ba:d9:54:5e:c8:5d:7c:ad:1d:ff:8b:3f:ab:
8d:ad:59:7f:f7:eb:d8:52:cb:04:42:24:a8:b4:20:78:59:4c:
85:97:a7:b9:6b:3f:c2:63:65:0b:10:f2:30:02:97:a2:26:00:
cf:bb:73:eb:d1:47:d4:0f:85:18:e9:45:d3:76:6d:46:ef:b4:
c2:6b:f6:7d:5b:58:93:ba:f6:46:ce:61:fc:d0:56:dc:92:31:
4d:4f:9a:7f:8a:1f:84:18:9b:67:5f:52:44:c7:de:1b:8a:70:
d7:ad:44:6c:4c:f4:6e:df:f7:f3:6e:20:6f:69:9e:ab:fe:60:
35:47:d4:53:13:f9:c2:6b:97:5d:55:67:b4:4e:ad:b9:a8:46:
69:b9:a9:1d:87:c2:87:5c:10:4d:12:85:a5:62:db:5a:d3:60:
68:09:07:c9:58:72:2b:9b:9e:8b:41:28:cf:38:e1:41:01:b2:
81:c4:54:c0:4b:87:0e:0e:e6:8a:81:be:38:3a:98:7f:a6:ab:
d2:3e:c1:dc:6b:8b:9f:f4:4b:0e:e0:1a:63:58:11:18:21:71:
4d:23:ea:3c:9c:14:5c:fd:35:a3:2f:c1:3b:52:ba:29:e6:12:
ac:cf:e1:a4:9a:0f:d0:05:4f:f9:4d:38:31:8b:ae:37:c4:be:
35:c1:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:37 2025 by rpki-client