Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: xxt89IdtWSxY1MxHWcob0lql7XPolyttQMo5fr4MdvM=
Subject key identifier: D0:4B:28:A6:01:07:51:6A:BD:64:5C:7B:15:45:70:A9:3A:09:5F:71
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 0198D4740F60F0B28FDC90A172043BD506B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: DC
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: 5Dk0AIyQ8366dMD1Y4_Uei8F_xA.roa (hash: zRbpvOB6g3fcUQ2lDKrBbTaTLHRrCOPhGnLFNdn6z9I=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: 6Dar+8t6pYDjGQ0APOu/CePD4FuR0WyGs0U3RUUhG8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0f:60:f0:b2:8f:dc:90:a1:72:04:3b:d5:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=d04b28a60107516abd645c7b154570a93a095f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:1c:8b:42:29:9c:c0:94:2a:21:65:25:ae:
84:c5:89:82:31:aa:6a:40:ea:19:02:d0:aa:e6:59:
05:eb:80:a1:42:5d:95:25:60:67:b7:2b:31:f7:b2:
10:c5:53:66:26:2e:1d:75:4d:41:40:01:e5:e8:fb:
9c:ca:31:5c:58:41:3c:e8:ba:de:47:b9:9f:0a:d1:
fd:75:2b:7a:72:08:81:fb:7e:8e:d0:a5:78:08:27:
3e:8c:77:91:83:52:5b:fe:12:3b:ab:42:15:f3:b4:
2e:ca:60:5c:ae:a7:b2:fb:dc:e1:34:b9:c5:d2:f5:
30:f1:79:34:b4:9f:b8:da:08:63:d1:a1:78:90:85:
31:03:5f:df:96:ee:af:f9:5d:5e:5d:cb:b8:c7:01:
6d:90:20:94:4f:a9:96:66:3d:c5:8e:2f:0f:8e:81:
7c:c8:a4:0d:00:e6:f4:73:8a:18:0f:31:44:11:8c:
58:c9:4c:8d:1d:c8:19:50:27:8c:1e:38:df:3a:5c:
d5:d1:de:f4:66:c7:5d:35:b8:6f:bc:23:79:17:df:
45:0c:cd:75:0b:ab:ee:cf:58:aa:6a:98:37:74:aa:
c0:05:d0:41:0b:ec:03:69:5d:7e:1c:bb:60:97:09:
16:96:e8:65:26:c6:34:f7:4b:22:31:29:09:ed:96:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4B:28:A6:01:07:51:6A:BD:64:5C:7B:15:45:70:A9:3A:09:5F:71
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:4e:0d:a6:15:9a:f1:21:4c:57:41:72:5e:86:b6:7a:02:
19:bf:ea:d7:4d:84:ff:af:77:b5:ed:10:7e:d6:87:03:fb:fc:
d7:c0:fe:41:48:1d:e3:ce:e8:3f:47:6a:9c:02:81:54:06:bd:
ec:a3:c6:f1:c5:9d:4e:27:34:76:39:19:25:72:4d:c3:85:13:
7c:95:b4:82:c3:06:d1:46:47:a3:8d:8d:b2:f7:2e:bc:7f:05:
f3:8d:4c:01:ac:52:9f:de:9e:66:86:41:f3:27:4f:7b:c3:75:
d6:8b:86:63:ad:ea:0c:fe:0b:5e:db:73:f0:4b:9f:53:da:77:
d0:90:9f:f9:da:9d:54:a6:cc:2d:f7:32:d6:ce:e0:14:ed:d8:
49:f6:a6:c6:ee:68:94:7e:20:2e:b8:6c:f7:d0:17:40:47:73:
8a:1d:28:b2:65:c7:9a:78:8a:af:cc:0e:27:28:41:2e:ea:9c:
65:33:c5:0a:71:e9:d7:a1:cc:2a:b8:d1:79:1f:75:e2:d0:e3:
03:06:59:a2:f7:49:53:3a:3b:5b:a8:cb:0a:c2:c0:c9:ed:b4:
76:c9:40:a4:c6:b4:7d:6a:06:cb:8b:f7:e3:13:d5:3d:77:29:
9a:c4:f3:2b:27:76:d3:66:60:60:ad:b7:23:27:98:ca:c0:ce:
2c:2a:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:03 2025 by rpki-client