Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: DPhrfCA5VUVmGSNZGI74qhwnlj1l+Nlfv2JH78KFS68=
Subject key identifier: C3:D7:14:DC:42:EC:CC:A6:BB:D3:01:E5:CA:90:9E:52:4D:96:CB:05
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0198D5BB8626D05D6B6CDE19DCCE9E4979A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0D1E
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: 1zeF/RPuxYalWZBV0ip92HJAHwxAqc7LbC29oAhNYO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:86:26:d0:5d:6b:6c:de:19:dc:ce:9e:49:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=c3d714dc42eccca6bbd301e5ca909e524d96cb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:c1:2d:e5:44:d3:71:aa:23:8e:ca:4b:59:
0a:78:bb:8c:d0:2b:3b:8b:e3:0e:04:99:e6:e7:0b:
0d:89:95:03:b7:e2:ae:ea:fd:31:9e:5c:8f:47:cd:
b6:52:65:dd:a6:24:1b:2d:8c:12:77:5e:dc:46:32:
4d:02:ce:e2:c2:fd:eb:73:42:c4:40:b4:cf:f8:51:
fe:93:d2:39:e5:a6:e6:11:a8:52:04:85:91:26:39:
96:27:d9:b6:de:e3:8e:76:28:10:0a:19:28:8c:4d:
dc:6f:1c:f8:cf:59:e2:50:a2:bc:b9:62:84:dd:7f:
2a:87:a7:83:cf:4d:64:24:a4:7c:1a:50:63:47:6a:
1d:8e:d8:f4:1e:4b:52:d4:c3:1c:34:0a:66:1f:3b:
e8:f6:66:8a:d8:24:33:ac:2a:c3:87:37:d4:d0:18:
2c:49:27:93:54:71:0f:e6:ed:68:96:b5:3b:34:42:
56:06:85:e6:db:40:90:9f:ee:df:02:7d:f8:5a:7e:
7f:85:19:3b:09:c0:98:57:67:bf:60:c3:4d:c7:32:
41:f9:74:58:86:47:5f:aa:1b:d9:14:fe:80:99:2b:
c8:e3:12:5c:88:c9:bd:57:5c:9e:17:75:74:b4:94:
be:45:9f:6a:ad:b6:b5:65:11:c2:29:40:29:3d:f2:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:14:DC:42:EC:CC:A6:BB:D3:01:E5:CA:90:9E:52:4D:96:CB:05
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:30:57:39:b9:6f:f7:5e:d6:ac:6e:f9:48:d2:aa:30:9d:
0b:7b:51:6d:50:46:76:9d:9a:7b:79:c6:d0:e6:59:b4:e1:e9:
ef:37:06:57:b9:55:05:be:3e:3b:a5:80:6c:f7:1a:30:61:0b:
50:ab:ab:5e:94:0c:d3:13:9e:bc:91:09:3b:76:a4:85:1a:10:
50:46:e0:37:42:31:a7:23:08:4d:61:15:fc:86:d3:01:29:43:
d2:3b:f2:a7:36:af:d3:fc:7e:08:db:30:bd:08:db:84:47:8a:
d3:54:8a:54:3d:72:f9:a7:9f:48:e8:66:2b:3d:48:b5:89:28:
75:f7:82:52:04:b0:4f:21:52:67:b3:8a:b9:ad:57:90:09:e1:
b2:c4:1b:41:49:a3:9d:d3:e2:6c:dd:87:66:3b:43:11:c2:9b:
93:a1:55:47:74:02:6b:7e:3c:a1:9b:e8:67:09:2c:88:4a:21:
92:bd:58:f7:1e:52:c1:6a:89:db:9a:f6:37:aa:fe:5c:a9:6b:
53:2a:35:1b:6e:9b:ef:3e:b5:39:41:6a:59:32:43:f3:ba:fd:
f5:07:c2:e2:8f:c4:54:dc:09:5c:79:b6:4c:d7:cb:5b:67:97:
ce:1d:a0:e3:96:81:4b:24:d3:92:50:f1:4e:54:40:fa:3d:82:
7a:1f:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:42 2025 by rpki-client