Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: gHHtTuEVVsp3+OjvAxJU/I+n+7BpyMSFzcwhtnScRX4=
Subject key identifier: E2:71:BD:32:89:C5:85:79:32:F8:1C:C8:8C:78:3B:C1:92:19:74:5F
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0198D5BC279E52F67A5F8802F2DB0B82C395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: Tz7+9lusvEg8T2jhsMQkKENC8jtPFRYiRO8vt/n7olA=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:27:9e:52:f6:7a:5f:88:02:f2:db:0b:82:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=e271bd3289c5857932f81cc88c783bc19219745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:b4:a4:aa:1a:04:ef:11:dd:30:5e:46:a5:
6f:9c:d1:9a:2b:00:a6:8e:d7:31:fc:71:d2:70:9e:
32:84:5d:a2:c1:90:88:e6:18:ef:84:1e:af:1b:5d:
f0:1d:d8:19:78:25:fd:be:45:f3:ad:ee:79:c0:6a:
32:77:3f:38:01:96:5a:90:60:20:bb:c2:78:b5:9d:
ee:d1:28:41:ad:29:05:31:02:38:7c:8b:80:71:b5:
48:8b:46:3f:2d:69:c1:7d:26:5f:75:a2:b2:96:16:
4f:53:e4:59:92:1c:68:64:02:40:1f:22:d4:3c:79:
9a:17:c8:cf:5f:d7:37:d5:fa:1b:fd:0d:62:af:5e:
ac:cb:db:10:51:5a:8a:41:66:6c:03:7b:d0:eb:43:
b1:98:29:61:90:ce:79:00:e0:f3:63:6c:6b:58:48:
20:56:2c:a4:ad:8d:8c:c5:d7:bf:c5:15:a4:7b:97:
73:37:4c:97:36:12:f3:21:90:8b:c8:a8:f4:7c:af:
e3:11:e2:77:7a:d7:89:e5:41:30:03:f9:82:da:9b:
18:93:98:39:b7:fd:8e:89:37:c2:53:09:83:0e:3e:
3f:3d:3f:16:ba:7a:93:2e:24:4f:5f:77:83:55:52:
cd:b6:71:18:de:2e:6b:65:57:46:98:89:3e:e5:1f:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:BD:32:89:C5:85:79:32:F8:1C:C8:8C:78:3B:C1:92:19:74:5F
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:cb:b8:98:b7:8e:50:d9:c5:43:f8:4b:c5:2c:c6:4f:c4:
13:f7:4c:69:26:ce:89:bd:51:20:3b:68:df:34:dd:30:78:f3:
4f:93:67:ec:7b:77:17:a7:5b:5f:72:da:84:87:f4:4a:9d:13:
e9:81:fe:8e:5e:62:ef:20:bb:aa:f5:d2:19:09:1e:44:37:d4:
df:47:59:b6:9d:8c:4a:68:e2:2f:4b:4c:1e:e3:e9:84:6a:63:
65:3c:9b:d7:65:9e:b9:30:ae:f9:15:e0:6a:85:6c:a7:b5:67:
09:4a:3e:97:df:78:3d:06:65:7f:ac:9e:ed:79:ae:c7:98:67:
01:5c:97:0d:3a:03:0a:34:c7:d7:ee:1b:ec:71:24:7c:b6:b2:
58:8a:09:76:23:40:b7:59:24:be:86:e1:95:e0:be:cb:0a:00:
22:c9:dd:f0:fb:51:32:a1:37:df:b8:7e:8b:b4:a9:53:fd:00:
59:dc:d6:17:3b:3e:3e:ea:49:ad:11:3b:48:22:f5:c7:56:5f:
7b:7c:2b:41:9a:30:9d:19:a2:8f:a1:65:1b:60:81:91:a2:a5:
27:49:64:8a:67:c7:81:dd:d0:d5:cd:82:b7:48:fb:24:74:ee:
fc:88:a5:1e:c8:54:02:bb:f1:92:2b:1b:8b:d1:88:0d:d0:45:
aa:e2:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:30 2025 by rpki-client