Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: Vj0OnBZrOpN0aDDOLAhtD7tHoxuG52nLqMCEyW1P44Y=
Subject key identifier: 78:9F:84:DE:86:A2:8D:0A:74:AE:56:57:55:80:36:F8:FB:25:AB:CC
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 0198D54DC84E5830D5A4EF244E41F1074F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: vWKRfFQVfSgLGJ91+FCekqig8OivnDfV8QE+1F9aA0Q=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c8:4e:58:30:d5:a4:ef:24:4e:41:f1:07:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=789f84de86a28d0a74ae5657558036f8fb25abcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:5b:d3:84:79:0f:bd:17:f9:bd:03:37:24:
43:d4:b7:35:c7:a4:7b:77:47:ae:08:e0:8c:4f:39:
92:0e:ab:7e:d3:58:02:b6:0e:1a:23:8a:cb:c6:f2:
49:31:b2:cb:56:c2:a3:ab:91:96:83:b3:a9:b2:53:
bc:09:74:11:77:f4:f2:4a:67:63:56:64:a2:ab:5b:
05:5c:3c:6c:9b:b8:44:e3:31:f9:7e:c8:f5:19:12:
dc:7b:b3:5d:c0:50:41:d5:15:9f:fa:c7:7e:49:c7:
55:7e:4d:67:62:df:3a:5a:c2:de:e8:a8:47:c0:8e:
63:21:5a:d1:09:e6:88:cf:94:53:5c:c8:eb:29:67:
6a:ff:5a:89:a3:a9:f6:9b:54:ad:0e:8c:55:18:5b:
78:34:43:70:ec:a0:e0:a5:b9:4d:63:1b:e9:74:ca:
87:b5:0b:a8:e1:fb:61:d4:c0:5c:af:31:86:82:1c:
f7:3a:b6:c1:af:51:38:3b:f8:d5:9d:1e:b3:3e:44:
3f:b5:08:67:76:ee:3f:b0:74:2b:c8:dc:69:25:77:
8e:26:92:e2:25:cc:fa:8f:19:a9:5c:03:be:37:28:
7b:56:af:dd:f0:a3:59:32:24:f0:6a:08:bf:12:b6:
9b:7c:e5:12:d5:3b:7a:fb:e1:8b:80:42:18:f5:a9:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:84:DE:86:A2:8D:0A:74:AE:56:57:55:80:36:F8:FB:25:AB:CC
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9e:95:49:11:f6:62:7b:8c:e3:79:9a:70:60:da:84:2a:51:
d4:57:f5:3e:6f:af:94:d7:1b:6a:a2:86:c4:41:5d:eb:00:82:
7c:52:5b:f5:fa:62:37:82:8a:48:4d:b9:76:01:d7:6b:04:0d:
31:a2:5a:ee:1d:7b:ee:04:d6:ae:ba:6b:fe:aa:b5:49:4e:c6:
ae:2e:df:6b:c8:61:af:19:10:f1:07:0c:a4:e5:d2:73:c4:b0:
7d:b5:7e:57:b4:4f:f6:2e:71:a1:70:ee:a4:6c:51:55:96:5a:
39:d8:df:b5:9f:85:ce:db:ab:81:b6:86:2f:17:ea:08:12:cc:
09:1b:a8:02:5f:d6:c6:ac:3f:e9:9d:e9:e9:65:d0:32:99:75:
72:21:24:07:5a:39:e8:52:cc:84:b0:58:5e:be:ba:ff:4f:75:
34:10:a5:6c:3f:71:8d:b2:70:c3:73:59:08:df:ed:7f:57:76:
bc:19:12:63:4f:cb:d8:24:ec:5a:d2:94:d3:e8:9b:9f:c6:cc:
c7:0a:84:5f:fc:5b:76:77:25:32:0c:07:25:95:3d:cf:64:91:
58:02:9c:db:3b:59:42:7b:57:2e:14:4e:6a:f3:c7:9c:f6:28:
39:d3:a4:38:f1:3a:b7:38:25:b8:60:3e:47:46:25:0c:1c:d8:
3b:37:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:47 2025 by rpki-client