Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: +4o6Y9A/GJt0CE7NZUkYtwBj5zhRbV6w7D5B+nuhg7Y=
Subject key identifier: 78:86:43:9C:5D:04:8E:91:75:B0:F2:C9:DF:4C:34:8E:23:D6:F4:9E
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0198D65FFD49EF4FC54AFD9F6D616223B76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 146F
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: fvG2bYdoic2XtjTA2QjHJ9UW1B/4XZusHouTmJnpsJQ=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fd:49:ef:4f:c5:4a:fd:9f:6d:61:62:23:b7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=7886439c5d048e9175b0f2c9df4c348e23d6f49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:a0:fb:87:81:83:d0:d0:a0:3d:26:12:b4:
43:b3:59:2a:6b:f8:22:10:12:b9:6b:91:62:66:99:
9f:ec:cd:0b:01:7b:76:cc:38:7e:f6:2e:99:7a:d6:
5e:56:30:6e:49:c6:85:ed:d0:14:22:6e:e6:6b:22:
ac:d5:ca:da:3f:f2:b7:78:be:89:57:3f:1c:10:45:
64:54:be:4a:d6:cd:7e:31:41:d7:be:80:0a:74:cf:
7e:b0:42:a1:c7:41:67:25:e5:c2:57:a8:bf:1e:ba:
8e:0c:98:49:d3:8f:4c:72:de:e8:c7:01:60:2f:03:
bb:12:94:e5:2d:bb:68:ef:32:15:b7:68:54:36:e7:
a6:b1:46:c6:44:43:a1:5e:52:ef:e7:02:95:fb:a4:
09:e6:d2:17:dd:b6:ef:ab:ee:04:76:73:10:0a:79:
10:29:39:b0:f0:55:bc:b2:6e:be:e6:8a:e8:7f:53:
09:9a:39:cd:bb:0f:e9:76:7f:16:8b:25:1e:c2:17:
14:61:fc:a1:92:c9:e7:3c:12:27:eb:c4:7f:34:92:
f1:72:3a:35:57:81:36:fd:d2:67:2d:de:c2:4b:9b:
23:8e:c8:ac:1b:98:13:75:2a:1c:b3:a1:09:11:bc:
3b:f8:25:31:44:a6:d4:b1:7f:9b:32:48:ef:b6:fa:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:43:9C:5D:04:8E:91:75:B0:F2:C9:DF:4C:34:8E:23:D6:F4:9E
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:45:a0:ef:2b:ec:0d:90:1e:96:94:9e:9a:f8:4b:e1:a8:
fc:92:d6:40:52:d4:02:fe:0f:33:f1:c9:f8:9c:c4:91:b6:ef:
b7:a0:cc:34:fa:f0:18:19:ee:d0:85:b1:59:41:7a:e0:61:53:
5f:7a:b4:6a:de:99:d6:c8:0d:ad:d7:82:0a:d1:37:40:ea:00:
b2:b8:a4:ea:20:71:4d:96:1e:45:1f:88:fe:f4:82:81:33:f0:
fb:56:a5:3a:94:f5:18:20:ab:95:9c:78:b1:2b:35:eb:b7:29:
30:b6:ee:0e:fc:81:46:11:be:1d:1f:92:dc:22:71:b4:27:02:
12:e9:4e:f4:43:6d:07:d1:fe:ec:ab:4b:8d:9d:ba:b5:31:71:
d7:74:4f:b1:4b:a9:82:26:11:d5:27:a4:be:06:ac:74:c0:ec:
02:49:6e:8e:65:33:d5:86:97:ee:eb:3e:a2:8b:6c:5d:ca:9c:
2c:46:c1:d8:01:01:51:1c:23:5e:8b:a7:17:4e:68:51:8b:7c:
17:0a:4e:7d:d7:5a:2d:55:ea:fa:33:67:b9:3f:2d:42:11:4f:
71:f3:05:4d:74:f4:fa:7f:84:b8:ac:34:30:a8:92:98:4d:18:
02:58:cc:4c:5f:77:e7:18:23:44:c7:55:13:e1:5c:dc:b9:78:
32:38:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:14 2025 by rpki-client