Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: DoUQSki41/kavMZ7/9vmarcULloQBBqkUWui8mqIktg=
Subject key identifier: DE:55:52:02:B7:A1:68:58:B3:0F:39:E8:D4:9C:10:B5:0A:12:2E:38
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 0198D5BBFC2CD9639AA6FA0B8D975C4D8807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: 5SAtpgGEbyupyYu8HMmVykJBVRdxaQaLtbW3YoaIies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fc:2c:d9:63:9a:a6:fa:0b:8d:97:5c:4d:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=de555202b7a16858b30f39e8d49c10b50a122e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:1e:35:c4:fa:f3:92:7d:44:86:09:0c:d3:
34:ff:aa:03:14:6e:d1:dc:bb:55:e5:c8:05:74:e4:
83:51:be:08:21:d3:f0:7e:b5:d7:43:83:64:c1:cb:
af:51:e1:0c:e2:10:8d:3e:ea:c3:aa:52:06:60:b3:
80:b9:38:a0:94:0b:ad:af:9c:5c:56:08:8f:c1:97:
da:f7:b4:08:fc:53:a9:9e:85:7d:bf:ed:ad:65:7c:
1b:e4:d0:11:fd:3f:4c:a1:fa:cb:3f:2c:4a:88:ff:
27:df:63:b1:09:6e:c9:20:3e:24:5b:bb:d7:0b:40:
8b:f1:05:21:9b:c4:8a:16:37:38:e5:89:5a:e0:61:
52:d2:c1:db:78:b5:4b:90:27:b5:c3:23:b3:c6:12:
f4:7d:5f:4d:57:cb:40:67:01:e8:01:93:8f:2c:65:
4a:e2:3e:1d:19:bf:dc:3f:5a:be:d6:c3:c7:d7:da:
66:60:9f:a2:67:44:97:64:bc:34:ac:53:d2:52:f7:
87:68:81:10:1e:cb:26:79:40:93:4c:1b:8c:fd:6c:
d3:95:13:a2:65:88:84:9b:7c:b0:10:9b:b4:b3:4c:
5e:31:fb:7a:9b:bd:2f:24:e4:ac:58:a3:42:2f:71:
3b:3e:68:e0:1a:0a:55:9c:10:12:40:b3:8c:a4:57:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:52:02:B7:A1:68:58:B3:0F:39:E8:D4:9C:10:B5:0A:12:2E:38
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:50:73:34:8a:53:9a:d2:22:72:42:c6:22:34:40:55:3c:d8:
df:bb:27:b6:ea:b4:51:47:6b:12:eb:8c:8a:61:a4:c4:37:7e:
70:7d:ad:8b:41:fd:90:d1:a3:5c:20:73:b6:e8:ab:38:fc:e6:
28:fb:d6:e5:fb:6f:6f:35:6f:bc:bd:52:fd:ad:e8:c1:ed:a1:
3c:24:53:b3:43:c5:f3:53:41:91:02:f8:f1:af:17:93:f4:a0:
1b:92:80:9f:ca:6d:54:f2:d7:8e:e8:16:cc:e9:09:4b:2a:f3:
91:8a:2e:7b:bd:ab:be:6e:36:f8:bb:f0:15:e6:c3:58:61:a7:
80:30:73:f2:73:90:a3:61:47:ec:c0:c9:8e:bf:9b:9d:f4:bf:
dd:cd:c3:98:d2:8c:04:aa:18:40:0c:29:96:55:ed:a1:de:f4:
c6:bd:59:46:23:52:7d:32:4c:cc:8c:fb:b4:b2:a7:3f:e8:ea:
3b:e3:11:d3:a9:2c:3a:57:e7:12:f0:5b:3f:5d:de:30:62:9a:
94:01:90:55:ab:43:13:2d:c0:bb:b8:90:2c:49:75:a1:29:5a:
ee:12:1f:d3:3b:85:5f:6c:b7:6f:91:bd:8c:73:d8:26:5f:7d:
fb:12:fb:62:0f:4c:f5:c3:f2:2e:29:a5:c4:ff:5f:4b:bf:cf:
ed:a9:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:06 2025 by rpki-client