Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File: dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier: PGBOzhlgDNV6ElCJoZuRptpol4q3um7j64kCA08gKtQ=
Subject key identifier: 49:10:87:F7:62:55:BA:7A:FA:50:98:32:E8:1F:92:14:0E:EC:8C:E1
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 0198D65F263CFEFB28D09025D6DB5C05AE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number: 063D
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: /r46UAJgHiJiDLZxdnbEFAKekEpcNRUqXG6znjyAl7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:26:3c:fe:fb:28:d0:90:25:d6:db:5c:05:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=491087f76255ba7afa509832e81f92140eec8ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:bf:0e:e8:6b:df:a1:a8:d7:85:f9:fb:e9:
a6:c3:88:0c:3f:a1:72:97:4e:c6:1a:b1:43:a6:ba:
58:c8:21:87:4f:9f:71:c3:96:a5:aa:1e:ce:89:01:
4e:7d:04:8b:26:89:51:86:77:7b:88:b1:9a:19:bb:
1d:78:d7:a9:36:e2:0e:a7:2b:db:34:30:ea:e4:b6:
8c:1d:2e:28:36:cf:a8:05:14:06:44:60:15:a8:59:
cf:63:4d:02:fe:b7:ca:05:dd:47:35:65:75:db:d9:
a3:5b:cb:c3:42:fb:7c:41:a9:cb:4c:5d:0c:24:0c:
d9:5c:e7:d6:d2:68:8a:d9:d2:80:59:74:3e:a3:f7:
e2:fa:ad:00:3c:40:4a:49:ef:ba:8f:b0:7c:4c:27:
07:ca:b5:5a:95:a4:ff:2c:2c:42:03:0f:8c:1a:98:
ea:63:ad:c4:09:1e:1a:b8:d9:cf:95:78:b9:64:67:
ba:1c:e7:f2:23:a5:33:74:c9:4f:49:73:2c:3f:5c:
c1:3a:cd:66:af:ad:93:67:68:00:32:17:18:4f:c6:
f5:23:36:4f:aa:dd:68:37:f4:ef:b2:87:22:bb:1f:
b1:5c:06:08:47:65:22:94:cc:7f:23:fa:a6:31:fb:
79:ac:dc:eb:e5:79:79:1c:0d:9b:89:65:ed:93:9c:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:87:F7:62:55:BA:7A:FA:50:98:32:E8:1F:92:14:0E:EC:8C:E1
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:d4:95:7d:7f:0f:cf:3f:85:ad:4d:fa:4d:dc:3d:ea:c7:
f0:75:97:a2:c1:9b:6c:a4:3f:89:3b:b5:10:b7:6f:24:36:27:
e9:40:87:e3:74:37:f4:c6:99:aa:9a:76:1d:d1:42:10:1f:7a:
c6:58:6a:5a:5b:49:07:bc:15:00:db:b5:2e:71:a0:51:cd:db:
89:d2:04:45:0a:22:74:de:bc:b2:25:46:d5:6b:cb:4f:c2:54:
bc:83:ef:ed:ad:27:a1:aa:60:b6:ba:cf:99:10:bd:65:e8:3d:
ac:ef:d6:b7:40:b6:93:e2:dc:5b:3f:44:82:fa:ba:88:10:b0:
74:9b:b0:c9:6d:e5:4a:99:2c:14:41:8c:3a:4d:20:0a:1a:d0:
2e:53:af:ee:d7:43:e7:33:0c:27:fb:9d:8e:b9:7b:89:6b:ac:
e0:71:2e:78:2f:6b:be:74:46:b2:72:7a:15:1b:ef:49:3c:21:
82:3c:46:53:b8:be:fd:61:cb:0c:bc:70:0b:6d:70:b1:b4:b0:
82:1b:3d:71:e5:bf:af:8c:91:5b:c9:25:fe:10:06:f0:75:ef:
97:b5:65:b4:0f:e3:36:d8:09:e3:51:da:ec:a5:b0:a4:be:1b:
3d:33:54:4d:ef:51:d7:3e:1d:c9:0a:33:b8:f8:92:aa:d6:0d:
61:52:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:38 2025 by rpki-client