Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: MGGhyK7QF0L+2Pzznj43RW1i72zTqWt8zKq3JiK5x3M=
Subject key identifier: 22:2A:DE:A2:29:AA:F2:B1:27:39:17:94:BC:39:B2:40:E9:3F:58:1B
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 0198D54E220274905E30D6753EF9B6D95CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: 544D+H340WR6GgbGBsIp6h1DBh2JrgGzFMMo64vAS34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:22:02:74:90:5e:30:d6:75:3e:f9:b6:d9:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=222adea229aaf2b127391794bc39b240e93f581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:88:5d:a3:f2:1c:3d:ee:fd:c8:04:24:b3:
54:6f:b2:b9:a1:98:c8:42:be:8f:6e:dc:3b:22:61:
44:a4:c5:e6:ce:8d:48:91:b8:e5:d7:27:3b:6d:86:
3e:c3:d2:79:62:2f:df:69:ef:ca:79:3d:9b:56:f4:
93:69:b8:12:80:2e:7e:ce:99:d7:e6:ac:58:79:95:
8b:92:f3:83:e8:e2:b3:b4:a4:ba:d1:1f:04:40:1b:
f5:a7:a4:92:f7:de:8b:07:a7:66:b7:3d:86:9d:69:
85:ab:12:a5:7d:bf:92:68:be:55:92:1d:9f:68:b1:
5f:38:13:4c:dd:8e:a9:2b:27:00:a1:8c:12:87:e6:
a0:43:61:06:c4:c4:24:06:ba:02:de:f2:b4:3c:62:
ea:49:c9:2b:e9:1d:71:1e:a9:65:08:0e:e6:c8:24:
a6:8f:51:61:13:4d:fa:ab:c3:37:6a:a9:8b:fd:78:
46:f3:e2:5b:b5:c8:1e:d1:d7:ee:2c:14:a6:8e:c2:
ad:6a:3b:5f:e7:76:91:73:17:88:c3:df:80:45:65:
99:14:69:11:bf:ed:69:ce:8e:a4:5c:04:4f:1d:60:
72:2b:12:37:b6:62:4c:53:4d:9b:1d:0f:0b:cb:d0:
a8:65:ca:97:e6:7b:4a:51:63:8a:14:73:d6:33:55:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:DE:A2:29:AA:F2:B1:27:39:17:94:BC:39:B2:40:E9:3F:58:1B
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:00:18:eb:bb:65:01:36:0d:1e:a2:6d:6a:d1:fc:2d:22:92:
81:e8:2d:3a:98:fa:39:4b:08:66:e3:70:c4:d6:0f:5f:87:0f:
93:6a:f4:8f:4f:1d:49:0f:05:6a:d5:b8:69:af:b1:02:0c:ef:
83:c1:a5:cf:20:c2:7f:5a:c5:3f:78:c2:ef:fa:58:8b:7b:5e:
4a:ed:05:bd:d8:05:f2:d7:07:92:ee:74:4b:31:76:99:04:f1:
92:0f:ca:23:e6:62:7a:aa:83:92:8b:7c:b0:dd:14:e2:b8:e7:
40:4b:c3:ed:6d:ad:45:02:8b:9f:da:bf:2b:90:96:d5:1b:70:
f3:e7:29:3c:16:08:8b:8b:4c:d1:40:9e:65:d0:d4:79:47:ac:
fd:55:8e:ba:25:df:3f:03:87:94:81:78:ae:8e:1e:52:09:6e:
10:b4:a3:5a:f7:cf:6e:60:95:a2:2b:65:f4:ee:76:e6:e1:db:
de:a3:f8:8b:f1:ab:fd:dd:d3:36:4a:0b:be:04:66:57:6c:bc:
62:ae:3f:e5:dc:33:1d:88:ba:fb:38:54:1d:35:e1:9d:b0:67:
14:3e:63:b0:e7:89:db:61:4b:8b:63:d6:09:51:4a:f4:c6:d9:
9a:6f:fd:bc:ac:d3:51:24:aa:53:bf:0f:75:52:11:84:ba:ad:
ef:f8:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:54 2025 by rpki-client