Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: KkwNqoyWNi8e6Zz7KzRP8VgAWEFhbfpv6X42Doq4s6w=
Subject key identifier: 43:72:1B:FA:C4:97:9E:EC:56:FB:16:75:3A:CE:33:86:F8:16:BF:63
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0198D5834202CB926970FB0F52E001B9DD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: OCdVShFtnEYG/q/bt0OwFhsMPKU3HKlOlQjWT0vghLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:42:02:cb:92:69:70:fb:0f:52:e0:01:b9:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=43721bfac4979eec56fb16753ace3386f816bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ca:1e:30:0c:f5:35:e4:95:b0:12:8b:fb:56:
99:97:92:85:fd:e3:b8:e3:82:f5:ae:51:e9:d6:1e:
88:40:1c:77:ac:e5:99:a4:d9:48:9f:f9:39:99:fa:
2a:43:79:3c:45:0f:87:e7:6d:0b:2e:2f:ac:6c:4e:
78:d9:da:69:7b:dd:76:29:32:6d:c2:75:bb:61:6a:
bb:0d:e2:b9:82:e1:96:17:c1:a9:7d:d6:06:a3:e3:
dd:de:ba:b3:3b:86:21:97:91:79:1a:72:23:96:7e:
f8:d6:aa:0b:19:96:e9:c5:4b:d5:e1:2d:aa:8f:46:
50:a9:cd:5d:5d:25:91:96:8c:2e:42:f2:92:81:4c:
81:9c:84:78:69:e6:f0:6a:f4:a4:55:d6:80:24:e3:
46:08:50:af:08:1a:cd:0f:59:02:c0:08:70:ac:23:
08:e8:27:e1:dd:1f:06:bf:c6:26:71:5d:c4:25:47:
a1:a3:43:33:c7:95:41:d7:6c:0f:2d:ac:b3:aa:b1:
cb:45:d9:30:c1:f4:86:2d:b7:38:81:98:0b:59:e8:
7a:39:9f:e4:a7:ea:95:98:56:df:13:95:06:fd:2d:
05:8a:5f:a5:64:95:f5:64:ca:2a:e3:44:cf:57:23:
2a:8e:b1:7c:18:e7:69:0c:d8:ef:a6:57:80:34:9b:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:1B:FA:C4:97:9E:EC:56:FB:16:75:3A:CE:33:86:F8:16:BF:63
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1a:b5:79:3d:7e:7a:42:82:36:7f:6e:85:f6:5d:d1:cf:61:
07:a9:ff:74:f0:30:4b:72:be:24:d6:9c:d8:f2:21:c2:c9:16:
a0:6c:dd:19:8e:b1:c9:c1:7d:02:9c:35:02:f3:f4:7d:9c:23:
35:9f:dd:78:80:8c:29:15:a4:99:b4:34:51:dc:f1:39:16:f4:
ac:5e:f6:53:cb:c1:48:a9:a7:9c:95:48:de:14:df:3c:a5:f9:
ea:1a:e9:fd:39:a4:72:72:98:9f:6a:27:32:90:36:d6:12:3f:
0a:d6:48:41:76:06:a5:05:2d:01:5d:85:5b:b2:17:8c:9e:3a:
a6:c5:bd:6c:56:c3:56:f4:94:e2:65:6c:69:1f:15:81:17:de:
c6:7d:44:fc:4c:ad:d0:04:0b:7f:f0:6f:77:cc:ea:49:ed:50:
98:a6:1d:b3:14:8e:0f:b5:40:b6:aa:f4:b9:0a:2b:8c:91:e4:
5d:f1:2a:cd:52:88:d0:00:b8:eb:db:43:ed:e4:dd:ce:86:75:
e8:f8:e7:e2:5c:cf:5f:ac:2f:5f:ad:ae:0b:0d:67:a5:0b:b3:
0d:39:72:74:56:4c:89:71:12:c3:cd:6f:85:af:5d:9a:20:a9:
4b:6c:23:42:d3:a0:6d:b9:cc:4e:14:f1:e0:0f:1e:e0:6f:bb:
3b:77:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client