Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: R+EZWP2uIEhIZunOI0tZNN9hdiQYucF6Lmo27SeXz1Y=
Subject key identifier: 30:A0:FC:C1:6B:52:85:48:12:2B:A8:3E:E1:28:12:D0:9D:EA:80:C7
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 0198D4DFF124712645B7AC2A278C32C49863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: 8Hezn1TxW8i/9pp+oVh61ggHJ66KDKn0WiqwL6Zhf4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f1:24:71:26:45:b7:ac:2a:27:8c:32:c4:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=30a0fcc16b528548122ba83ee12812d09dea80c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:79:53:cf:ae:5b:49:f3:f7:c8:3c:d1:d9:
00:28:75:3a:71:ca:80:52:e0:bf:6d:17:12:0e:8a:
c3:9d:a7:c9:a9:49:4a:0e:06:8a:1e:23:f4:d3:c2:
e3:5d:60:32:75:24:e1:df:aa:8c:58:fd:58:4e:68:
f2:67:bd:19:f3:2d:a3:64:51:a5:0d:75:ed:16:1c:
6e:52:f2:e2:0e:33:57:4c:be:69:ff:d7:49:1b:be:
bb:52:2b:54:c8:23:47:09:51:85:03:5c:58:9f:0b:
f1:59:a9:1b:9b:f9:a2:1f:b4:b4:89:5c:e6:09:c8:
11:71:f7:42:98:b9:2f:9d:5e:bb:19:ca:3e:ac:c5:
56:81:2c:dd:61:68:62:60:7f:26:da:1f:5a:a6:10:
a6:b5:5c:80:27:18:04:7c:aa:cb:37:d0:e9:1d:ed:
2a:0a:f2:72:d0:fc:b2:3b:57:00:b2:bc:86:77:45:
e0:33:85:00:63:7a:d0:12:be:cf:de:ad:ca:e8:9a:
e1:be:2f:55:74:1e:11:c7:15:97:3a:65:b0:5b:9e:
31:ff:2b:2a:b9:64:45:c4:90:91:7b:7c:76:97:ae:
dd:77:69:41:45:94:14:f8:fd:2e:0f:e8:3e:fe:ac:
37:ad:a9:22:36:55:f1:f8:9f:99:25:d5:3c:f1:50:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:FC:C1:6B:52:85:48:12:2B:A8:3E:E1:28:12:D0:9D:EA:80:C7
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:a5:13:a8:81:2b:ba:25:ab:18:16:f7:17:e8:19:6a:23:
4f:a8:54:a6:27:84:a0:31:6b:43:94:12:85:f8:40:69:55:f7:
74:93:63:05:98:a3:30:02:cd:b5:43:75:83:bf:4f:b0:9b:56:
53:ad:2c:c6:43:8f:6b:46:d5:68:56:29:55:fd:34:32:7b:14:
09:a7:2e:a5:b6:4f:1d:5a:88:bb:fb:91:ae:4e:7f:d6:ee:63:
8a:59:85:e0:d5:2b:15:e2:9e:83:7a:0e:84:dc:f8:de:02:c1:
b8:83:4f:7f:d3:c5:a0:6a:7c:0d:38:be:21:25:dc:53:7c:de:
a9:6b:46:d2:0d:08:0f:4f:fc:e0:fa:13:61:97:5d:e5:22:81:
3f:fc:6b:24:f5:a6:a0:45:65:12:68:fd:d1:65:39:f7:df:4d:
b1:a1:4b:ed:df:12:91:52:59:15:5a:3b:b7:16:07:56:f4:9d:
e5:44:21:62:8f:d6:14:9e:0e:a7:69:43:61:e7:c2:57:8f:1a:
22:f5:d1:21:70:e6:ea:d9:b8:a9:66:9b:1e:4a:ed:4e:71:df:
84:19:a9:40:bc:70:fb:e8:79:f6:25:c7:52:f7:bf:50:0e:72:
ac:b2:58:77:f7:4e:8c:b5:c6:fe:9d:e4:2d:38:17:e1:3c:f0:
11:2a:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:08 2025 by rpki-client