Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: IGPQ35mCAzszPFqaA2rnHUJ8BiD26E5cM9liKpYXcl0=
Subject key identifier: A8:D9:88:D9:BB:BE:E8:F2:3C:C1:AB:05:7A:93:D8:49:81:A6:E0:62
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 0198D4733CA25936F21C1072C7183705C4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 0601
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: 44bWMthW6kRJWW9YLL631egUCEgHUjxEUYqka+FR2sI=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3c:a2:59:36:f2:1c:10:72:c7:18:37:05:c4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=a8d988d9bbbee8f23cc1ab057a93d84981a6e062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:0e:2c:8d:95:8b:cc:31:c8:95:bd:df:79:
cf:e4:7c:a7:a5:1e:5c:bd:9c:27:9a:98:20:34:5e:
4c:af:88:89:97:20:6b:6b:7f:d2:82:9c:33:ba:9b:
90:98:f6:75:46:21:18:78:1c:d7:ab:47:44:c3:6f:
2b:47:76:ac:e1:6f:54:bc:d0:fb:4e:8b:a9:35:c2:
0e:51:39:76:23:af:a1:da:f0:56:0c:55:d2:25:5e:
f3:45:2c:9f:b5:94:0b:b0:0a:8e:ab:27:a9:d4:96:
06:85:33:33:74:28:40:a8:8a:d7:cd:c7:42:0a:3c:
71:c7:28:a7:29:3d:70:c2:98:b3:85:a0:9a:81:96:
d3:ae:d7:22:d0:a8:e1:08:f6:51:c3:f5:34:90:b5:
a1:89:81:a9:9b:f9:3d:a8:8f:a2:b4:92:53:4f:d5:
e6:c7:c5:9e:0e:d0:15:82:e7:46:84:c4:aa:c9:be:
b4:04:65:6f:26:d3:80:b0:9d:1b:2d:c7:a1:07:6f:
76:07:7a:4b:ba:72:4a:10:57:9f:9b:20:b9:16:b7:
7a:b7:52:9f:77:41:aa:3b:17:f0:c7:34:4b:2a:0b:
16:0a:2c:73:e9:3f:e1:54:e7:6b:0c:76:bb:e3:a4:
69:cd:27:1f:d2:1f:9d:aa:84:6a:6d:47:a2:1a:42:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:88:D9:BB:BE:E8:F2:3C:C1:AB:05:7A:93:D8:49:81:A6:E0:62
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8e:bb:1c:82:16:18:5f:83:72:c1:51:3b:c4:44:18:e4:26:
74:e0:30:5f:e8:49:95:92:d4:72:16:89:09:42:25:1e:58:18:
00:33:3c:b3:7c:af:da:a0:2d:2b:bc:97:77:47:db:cc:52:2f:
d2:0f:f3:c1:88:54:d1:64:97:b0:81:93:19:58:92:75:37:ec:
58:2b:6d:c2:26:64:f4:19:fb:eb:05:74:6b:c9:b7:9a:15:62:
63:a2:42:66:3e:f0:e5:5a:72:71:b5:bc:09:33:1d:1a:f3:c5:
27:7f:9e:9e:7f:73:28:fa:02:08:03:55:b8:f9:37:d4:e5:3b:
08:53:a6:e4:8f:fb:5b:b4:12:ef:21:75:00:13:0a:e7:ab:16:
a6:70:17:c7:0d:e1:67:ec:a7:93:7e:1d:f1:7a:0f:61:dd:59:
04:69:46:1e:f0:67:bc:3a:1b:c1:3d:c9:5e:37:e5:4c:bc:c0:
6a:9a:a6:08:51:3f:13:b4:9a:b5:6d:e7:27:f7:a0:a9:5f:12:
98:90:af:bf:e3:b6:91:8f:4d:4e:71:97:97:c9:a6:c0:11:1e:
1a:3c:19:e6:a1:fb:46:ba:a8:56:d0:d5:29:6f:6d:37:8c:b3:
d6:a9:8a:2c:89:cd:92:27:da:81:eb:50:67:30:e9:77:99:20:
f7:0c:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:39 2025 by rpki-client