Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: bU5F1lh0KdTl5H3tI6SDWgTbEKvM3YAdPCZW35lW1iw=
Subject key identifier: 7B:58:B2:44:74:40:00:CF:EF:4D:7E:6C:45:F2:77:AD:D3:10:50:D8
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019882435F21BFA7F34B419ADCF027913AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0F23
Signing time: Thu 07 Aug 2025 02:01:49 +0000
Manifest this update: Thu 07 Aug 2025 02:01:49 +0000
Manifest next update: Fri 08 Aug 2025 02:01:49 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: qkt2nmCpjsjWHrNSdgtTuZcaGT2siUKFNal1gxiP9Y8=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:5f:21:bf:a7:f3:4b:41:9a:dc:f0:27:91:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Aug 7 02:01:49 2025 GMT
Not After : Aug 8 02:01:49 2025 GMT
Subject: CN=7b58b244744000cfef4d7e6c45f277add31050d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:5d:3d:c4:ac:4a:2c:34:3b:22:9b:95:a5:
5f:17:17:ac:43:7d:51:c8:56:e5:49:38:d3:b6:84:
4b:bb:d1:16:55:01:40:90:62:dd:dd:c2:52:a3:e6:
57:d3:7d:0d:9b:85:66:39:e5:52:55:71:4e:98:9f:
9f:21:2e:91:8a:9d:07:79:e4:6d:f8:1d:8d:a1:67:
93:14:ef:01:24:12:59:e1:9a:f9:2a:ac:c7:d5:65:
b1:7b:87:86:f1:97:4f:61:eb:06:a4:f4:1e:90:e2:
2a:0d:06:0f:87:45:1f:b1:df:a3:ab:b2:17:5f:f0:
b4:7e:e2:07:de:ea:a3:dc:78:bf:1f:ca:06:6c:e6:
6a:5c:ad:6c:0f:85:a1:57:63:c6:d8:29:97:ea:f4:
42:a4:e7:c0:36:ce:7c:6d:0e:30:0d:10:b7:d9:e1:
ff:99:cd:42:3e:aa:86:e5:d6:a7:08:6c:0d:16:16:
d9:64:93:8a:2d:27:61:f3:6f:5a:8a:30:27:61:99:
a7:6f:82:ce:ee:a8:89:b6:93:68:39:ca:ec:0e:da:
07:ce:6c:ca:41:69:15:91:5c:4b:98:df:54:5c:4b:
2e:29:cc:ea:d4:f5:60:52:4e:08:88:29:16:a9:12:
c4:6f:e6:c1:ac:f0:df:09:4e:ec:ba:12:4e:81:79:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:B2:44:74:40:00:CF:EF:4D:7E:6C:45:F2:77:AD:D3:10:50:D8
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:35:7e:31:01:4a:bf:62:66:17:45:89:87:c1:8b:44:9b:
a7:0d:83:cb:75:0d:55:78:0b:db:a3:aa:e5:37:c5:8c:ba:0e:
2e:4c:ef:75:43:4b:99:5c:ab:63:25:36:a4:a1:87:95:16:ea:
fb:ae:8e:36:1e:f8:01:eb:ba:e7:7b:d8:e9:24:cf:86:e2:5f:
81:b5:7e:29:fd:4f:93:46:ec:bc:2a:8d:00:1e:c7:65:10:f8:
55:72:4e:fd:61:dd:76:26:8c:65:21:1c:e2:73:34:03:f9:cc:
e0:69:91:91:47:39:c4:10:8c:77:31:b4:fb:7d:f5:5f:f8:de:
52:f3:ac:b2:9c:74:7a:64:6d:d6:fe:98:24:79:e5:ba:eb:58:
8c:b5:be:04:0e:b4:d4:a6:d9:f5:26:46:18:d1:32:f6:e0:5a:
7a:df:0c:64:d9:eb:84:f7:28:24:04:36:ec:7f:90:88:61:37:
54:b0:01:8a:dd:ea:eb:c8:ac:eb:5e:52:6b:b2:7f:0d:5f:77:
a8:52:5e:de:e6:64:c5:dd:5c:a6:1c:f0:82:77:16:58:45:b2:
53:71:f6:ae:0f:35:e4:40:b3:d6:9b:9c:eb:11:ae:63:5c:ab:
1d:6b:71:de:a3:d3:2c:9a:8b:7b:0d:2d:7f:a8:cb:a8:28:c3:
39:83:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:13 2025 by rpki-client