Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: i2l15bl3MApFnsUX13cxpvEyW1Uq5ktX/dn+KjltnUo=
Subject key identifier: 49:4B:BF:A2:8E:7A:FD:74:AE:70:2C:45:B5:5A:C1:75:52:1F:5A:FF
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019895FFF597A95FA38BC345925E02EDFE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0C16
Signing time: Sun 10 Aug 2025 22:00:36 +0000
Manifest this update: Sun 10 Aug 2025 22:00:36 +0000
Manifest next update: Mon 11 Aug 2025 22:00:36 +0000
Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: KvF0xT0aQ/ya8tlPCpyMIKMfDkbv4pKcbkf9B3VOjP4=)
2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:f5:97:a9:5f:a3:8b:c3:45:92:5e:02:ed:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Aug 10 22:00:36 2025 GMT
Not After : Aug 11 22:00:36 2025 GMT
Subject: CN=494bbfa28e7afd74ae702c45b55ac175521f5aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:21:46:b3:af:bb:4b:fa:74:17:b8:ec:00:
21:73:8d:d2:ea:1d:0f:0b:91:5f:cf:c7:41:4f:58:
98:ea:f6:b6:17:96:69:d6:d7:66:f0:a7:32:94:77:
c7:f8:e0:40:9b:4b:e8:d5:e8:d3:57:08:94:b1:31:
cb:d4:64:cd:5f:3b:47:a9:c3:de:d4:bb:2d:f1:aa:
71:b9:d1:ab:d6:aa:1b:c8:6f:99:da:de:0c:7f:8f:
cc:33:c4:af:65:88:ce:ca:f5:e7:6b:23:f3:9b:c0:
48:61:04:44:4b:44:55:ea:81:29:d0:23:a2:10:be:
98:9e:66:d7:d0:b1:f0:12:48:f7:d0:f0:f9:7e:6a:
dd:7a:d9:fb:8b:70:57:79:c4:30:7e:a1:67:36:56:
cd:7a:10:fe:0b:36:26:e5:51:07:71:ab:22:d9:bc:
67:c5:7a:9e:c9:e2:26:17:61:f8:9a:0a:60:e9:f3:
f0:24:65:d2:b8:30:89:83:38:8f:d5:b1:7b:e0:6f:
d2:3e:80:a8:07:aa:b7:3f:d4:e1:94:b6:d0:dc:24:
13:a9:6b:4f:18:67:64:27:f6:49:79:fa:61:28:d0:
94:13:3e:ce:be:76:99:89:29:c5:43:f1:21:d8:6e:
70:cd:7f:13:6c:e0:a0:44:15:b1:22:04:57:60:d0:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:BF:A2:8E:7A:FD:74:AE:70:2C:45:B5:5A:C1:75:52:1F:5A:FF
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:77:e9:fc:c6:80:e3:d0:3a:b5:2a:51:d8:ac:52:80:2c:
e9:ad:83:b9:13:48:d9:58:31:f9:f6:74:a9:c5:2f:9b:66:7a:
0c:1d:8b:2b:06:2b:c0:67:12:7f:33:e4:48:e4:60:c9:27:fd:
0d:28:80:60:29:92:16:33:af:e4:f5:a4:64:75:de:36:8c:1b:
0b:08:48:47:16:0d:df:10:18:8d:8e:ab:78:5b:c7:4d:bd:71:
b8:9a:dd:c9:d2:f1:6e:ce:aa:6c:fc:aa:70:4f:41:87:b7:52:
80:21:4c:b5:b4:c1:08:3b:10:ab:c7:4b:59:d6:29:eb:7c:e4:
76:2f:04:9e:f8:e6:18:32:b9:12:f9:3c:42:a0:b6:a5:30:7f:
ee:7f:c6:41:5b:6f:3e:bc:05:06:c9:3a:18:41:2f:d5:2d:e3:
1c:e1:a0:93:63:e8:81:89:f2:08:4d:25:ed:6d:84:d2:7b:c3:
05:a5:f5:8f:3b:49:54:47:68:65:4c:37:a1:3b:46:de:24:30:
10:df:ef:0a:d5:20:9d:a6:cf:62:99:91:61:01:b6:62:ab:d7:
0d:66:81:0e:6d:17:71:96:4b:f2:e3:c1:63:f9:a7:a5:ac:43:
79:f0:41:a0:b0:71:2e:1c:fd:c7:90:64:d7:3a:26:7b:c3:2d:
df:3f:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:08 2025 by rpki-client