Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: L+axziewS1vIBQ7uqzGUr2vQgorsoLgGSKa3dVBQk0Y=
Subject key identifier: 1F:E7:BC:49:34:F3:21:F3:FC:30:BB:C9:3C:CA:CD:92:FA:33:A7:BA
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 0198D65F3D4CD250B21002D3934DF46EAF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1409
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: tEFdh0ZoVP4FGQJ60oP8boDtkKX3Vv7dfETxcxcDkSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3d:4c:d2:50:b2:10:02:d3:93:4d:f4:6e:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=1fe7bc4934f321f3fc30bbc93ccacd92fa33a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:4c:87:bb:ae:8d:b8:ef:a5:08:46:bd:77:
02:92:e5:e2:bc:59:7f:0f:98:73:de:be:77:ce:a4:
f9:1c:13:2c:8a:49:82:df:c4:87:39:b3:12:c7:b7:
1c:6e:0f:a5:f3:ae:e8:22:d3:ea:40:61:7c:5c:69:
c2:c0:41:c8:f2:2b:b3:69:39:cc:06:9e:14:7c:b1:
b9:66:c9:37:c1:b3:60:50:9a:2a:28:63:64:8e:3d:
ad:4a:06:e1:53:b6:35:7e:b4:50:ee:e5:ef:48:c9:
e1:b9:dc:b8:13:01:d8:0c:cb:52:e9:6f:9c:02:f9:
cd:bc:f1:dc:ef:2d:12:48:16:8e:24:34:e6:a4:88:
70:8e:7c:f1:24:03:7b:03:aa:43:98:98:6f:d2:c4:
20:ff:90:da:dd:8c:13:ee:e4:38:08:d4:a6:3f:65:
4a:f8:a3:50:2c:e3:f4:a4:05:f8:69:d2:fe:df:9a:
3e:ba:45:2b:30:b5:57:d0:6e:e2:bd:34:03:7a:07:
2a:48:9f:00:9a:63:10:eb:ed:35:da:81:90:f2:48:
78:33:fc:9a:ab:85:d7:c1:fd:18:25:d3:3e:b1:2f:
89:c5:c0:02:71:c1:21:c8:e8:25:52:42:3e:4c:05:
c6:97:8d:62:b0:26:2a:27:37:c0:a6:92:46:62:ea:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:BC:49:34:F3:21:F3:FC:30:BB:C9:3C:CA:CD:92:FA:33:A7:BA
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2b:7d:07:f2:05:27:b4:54:eb:92:04:fd:98:44:05:f3:57:
0b:9d:7c:04:82:11:46:05:03:9c:04:c3:7e:c9:b1:70:e6:61:
57:4c:8b:d3:5c:9e:b3:9e:09:49:fe:ff:89:f3:18:39:ff:9a:
79:56:d8:57:dd:8b:a3:1e:c5:e5:4b:66:bc:c7:d7:f2:ae:48:
7a:5c:b9:24:d3:eb:be:80:b7:f1:8e:da:5c:a0:be:23:01:0c:
d1:be:10:b6:f9:49:e4:82:83:58:37:57:1b:e4:fc:bb:1d:6e:
e4:08:11:d4:06:ef:48:d1:74:bd:27:c7:20:5c:04:f5:14:48:
03:1e:46:97:57:e8:20:94:0f:36:0b:64:94:9d:6b:5e:19:66:
9c:20:08:20:5a:c2:bc:26:d1:74:de:f0:4a:82:9b:95:b7:4a:
5e:ad:0a:20:9c:50:ce:35:1a:84:6c:cd:99:52:00:a6:9d:19:
07:cb:76:8f:c0:8f:c2:a5:90:21:f6:4f:a6:da:98:c6:c7:f8:
68:8f:a9:03:08:9e:34:10:b5:27:5c:fa:ac:b5:c4:8b:2b:e9:
15:40:84:3a:eb:23:cc:a9:59:25:c4:23:9b:a1:83:9b:bb:a1:
e0:b6:f5:c7:c9:ef:0d:a3:4d:9e:72:df:9f:af:8b:7c:f7:51:
5d:13:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:21 2025 by rpki-client