Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: ydPQxpH2naxFhEwnAi2/Xwk4wOHpDPkfwBMrvx6LbS8=
Subject key identifier: 7C:9F:3F:D4:84:12:85:1B:64:9E:BD:BB:D1:31:74:45:05:EB:40:AD
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 0198D773D9520E625A3C532FB89E133A0E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 15:02:30 +0000
Manifest this update: Sat 23 Aug 2025 15:02:30 +0000
Manifest next update: Sun 24 Aug 2025 15:02:30 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: ysa0EgiC+MqYQtrkO44BAVtiHtrfwVIF4xGgvl2opRg=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d9:52:0e:62:5a:3c:53:2f:b8:9e:13:3a:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Aug 23 15:02:30 2025 GMT
Not After : Aug 24 15:02:30 2025 GMT
Subject: CN=7c9f3fd48412851b649ebdbbd131744505eb40ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:30:e9:d2:6b:4c:41:fc:ab:54:a2:7c:b8:
31:aa:bc:dc:e2:18:99:7b:78:6d:8c:36:cb:a5:56:
18:de:99:5e:83:92:09:90:f5:9a:5a:e8:ba:dc:ac:
4a:67:37:3f:03:f6:83:70:15:88:79:bf:b3:3f:bd:
d6:d0:61:2e:11:71:97:04:1c:f9:7f:44:b6:ef:8e:
4e:6b:03:be:ba:2c:10:05:f9:84:b7:a9:ee:ff:e8:
65:db:b3:e0:31:c6:b6:da:9b:79:fd:3a:e8:c9:6f:
33:25:4f:1d:ba:ef:ee:15:9e:50:30:e7:32:f8:72:
7e:e1:72:73:41:ed:6e:25:8b:ae:78:b2:5c:f0:55:
6c:7d:bc:9b:9f:2e:f3:ea:60:1a:13:8a:92:51:c7:
b2:e5:17:a2:14:96:26:0c:fe:52:01:df:b0:bb:fb:
8e:ec:6c:6a:26:70:93:b6:18:61:f9:47:1f:3d:d2:
43:e9:8b:23:27:d4:d6:57:e3:58:97:fd:da:a7:bf:
1f:c0:e8:44:e1:5a:a1:94:1d:36:f3:49:7f:76:02:
86:bc:7f:87:e0:68:0a:f5:14:06:79:d7:eb:bc:dc:
e9:73:96:de:5d:6c:46:f2:34:04:d9:60:12:2c:01:
0c:eb:f2:24:49:9e:59:a3:e8:8e:bd:4a:a3:63:bf:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:3F:D4:84:12:85:1B:64:9E:BD:BB:D1:31:74:45:05:EB:40:AD
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a7:62:84:72:f1:78:a9:6e:f1:36:f5:d3:81:7c:31:15:f6:
6b:41:28:10:3e:6e:4c:79:ca:89:15:52:63:a8:87:56:83:42:
b3:01:fd:07:37:6b:91:c6:64:33:d7:de:a9:93:ce:d9:5f:ee:
3f:12:30:dd:6a:c6:ad:66:5e:eb:f4:0b:2e:03:a9:18:19:03:
6f:bd:d4:9e:4e:00:23:a0:99:f5:a8:f5:30:f5:5e:78:a7:ac:
77:2e:51:ee:c3:b6:bc:c6:db:86:b4:3e:37:b2:d0:f4:fa:b3:
ca:ce:52:fb:5c:87:88:94:33:df:38:78:2d:25:dd:82:df:66:
e5:71:70:37:e2:20:e5:b8:1a:e7:f7:5c:ee:50:91:27:fb:49:
89:a9:fb:26:9c:fa:6f:73:6e:47:2f:19:c2:22:fb:8e:9a:22:
37:80:c4:cc:44:d0:8c:70:8d:1b:3c:c1:cc:1d:9c:6e:ff:2a:
d4:47:68:55:0b:ed:cf:60:72:9e:c3:2c:44:db:7e:c0:92:5c:
fe:24:8e:60:4e:b7:60:db:a8:76:02:29:18:42:a1:70:ef:43:
20:72:76:88:23:b5:84:ae:9c:a7:14:0d:66:31:26:c2:60:89:
5e:b6:e0:a0:e5:35:c2:be:65:bb:b2:19:1a:3e:08:43:9f:ab:
60:07:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:29 2025 by rpki-client