Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: CcGVia/6oUVwntFr0ckiVQfaJSTGNvruBAQfThp2VS8=
Subject key identifier: E7:CA:42:90:AB:69:95:42:EF:78:69:8A:CF:35:E4:0B:87:77:1B:D1
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 0198D54E94C118C19FC052EF169446FEA320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0E28
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: +kftyIlvJHER/DKx6JU/U9oz2MO+h/kInOQnuvDzGus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:94:c1:18:c1:9f:c0:52:ef:16:94:46:fe:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=e7ca4290ab699542ef78698acf35e40b87771bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:be:33:76:75:d9:54:31:a7:7b:db:75:80:
66:b8:ba:11:a1:94:c9:f1:2b:24:b3:82:78:ef:34:
f6:2a:67:78:53:0b:df:5c:ac:dc:bb:45:16:e6:11:
d5:b8:df:c4:68:c7:5a:8a:2c:a4:21:b3:60:b2:46:
08:c5:0c:41:e0:97:c5:91:d7:90:fe:78:9a:16:9c:
fb:15:30:50:22:f8:cf:ce:43:43:e8:85:e7:b2:6e:
e7:01:d7:af:24:d8:a7:7f:78:37:b4:e6:8a:4c:99:
dc:ca:a3:9f:36:13:13:4c:3f:7c:67:fc:b6:b6:1a:
6c:3a:c4:8c:59:b4:e0:e2:7c:34:39:81:04:06:b1:
c8:7c:5b:32:0f:3a:b1:9c:c6:f4:35:3e:45:82:92:
23:e0:57:c7:7b:e2:94:d5:8c:90:3d:b0:86:5c:4e:
c1:0e:e8:07:63:de:e9:e0:3b:1e:8a:32:35:89:84:
38:10:a0:c9:d7:34:46:bb:13:12:de:76:ac:8c:b2:
3c:aa:d6:e3:cf:fe:e3:de:1d:49:f3:61:24:7f:3b:
6f:6a:5b:f2:93:cf:ea:88:e1:5e:4b:35:5a:6b:f5:
82:bc:d7:83:b0:32:b9:9e:40:fa:61:68:2e:7b:3c:
0b:70:e5:e3:f2:84:6a:e6:e4:b6:be:85:08:69:dc:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:42:90:AB:69:95:42:EF:78:69:8A:CF:35:E4:0B:87:77:1B:D1
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:ac:7f:3e:f3:45:28:bc:b8:b4:d2:f6:7f:6c:9f:79:9a:
ab:23:92:3a:ce:0f:46:f2:e4:02:70:a6:67:ca:76:68:ce:d6:
7a:68:88:bc:5b:13:4e:dc:6f:28:f7:b4:5a:e5:91:c1:f0:89:
de:fd:05:a5:10:35:0d:6a:1e:f6:d5:80:8a:e7:b7:13:87:b9:
0f:b9:6e:ad:8c:f3:c1:c2:0d:a3:ef:b3:2c:f9:5b:7b:37:af:
fb:3f:60:27:6a:c0:a1:66:53:90:ea:3b:12:24:34:bc:0a:b0:
c1:68:b3:1b:a7:c0:98:4a:7a:4b:e7:35:d0:00:ac:70:bb:28:
9b:2b:d1:1c:9d:b6:0d:51:ec:2a:8e:f3:77:ab:12:1c:0d:59:
f5:40:29:34:0e:a6:c5:aa:d7:ab:f4:08:e4:e4:c6:86:e6:bc:
53:69:5e:69:96:59:7b:f8:aa:d0:81:e7:ff:a4:af:bd:19:98:
51:9d:2c:55:53:94:4e:af:24:29:a7:9c:7f:17:0b:32:58:2c:
4c:d1:0d:61:e2:c7:1c:06:2f:00:30:5e:14:4b:1b:2c:49:b9:
f4:f0:da:4b:fc:9e:08:e8:87:9a:a8:5e:1a:bb:5c:6e:8c:01:
55:fe:a0:89:68:f9:c0:9b:ae:03:4d:13:c8:73:da:75:7b:76:
84:a1:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:01 2025 by rpki-client