Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier: m/BBgq3TTB6OGkj/qz1xycD1mbYoG9kplyKB3yHbPMc=
Subject key identifier: C8:80:87:C5:BF:1C:45:EE:14:C3:E9:95:3D:27:CC:B4:8F:0E:D9:DB
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 019874F5026BE4BDF62EDCC5470E9806D9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number: 0D69
Signing time: Mon 04 Aug 2025 12:01:10 +0000
Manifest this update: Mon 04 Aug 2025 12:01:10 +0000
Manifest next update: Tue 05 Aug 2025 12:01:10 +0000
Files and hashes: 1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: 5QIUlnmQ5HiuBhj9MZHHTfWTUz52zydX2R13ktTWZU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:02:6b:e4:bd:f6:2e:dc:c5:47:0e:98:06:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Aug 4 12:01:10 2025 GMT
Not After : Aug 5 12:01:10 2025 GMT
Subject: CN=c88087c5bf1c45ee14c3e9953d27ccb48f0ed9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:09:17:f6:69:51:2d:79:38:b1:63:16:b6:
f0:9f:35:e4:e0:e9:c2:e9:39:81:9b:45:25:80:ce:
05:e8:cd:3b:80:af:77:79:9b:fa:e9:e3:62:c6:54:
c8:a5:08:93:f9:d3:9f:45:8d:61:dc:b6:c2:e1:89:
37:8a:2a:b1:74:f8:12:db:2c:3f:0e:bc:fe:8f:1e:
98:be:86:ac:b6:b4:a9:63:85:bd:cf:0b:91:5f:ef:
de:57:a6:cc:85:2a:04:45:c2:ca:d2:1b:11:bc:4a:
f5:73:f7:a8:b9:db:b3:ac:f0:71:b1:41:eb:c6:13:
fa:f9:d3:8c:5e:94:11:f2:a4:b9:8c:de:f6:8e:d3:
0d:b9:a4:45:a9:81:ef:7e:5c:38:ec:a8:e5:d4:54:
f8:4f:2c:9f:13:b8:d9:88:ab:86:74:a3:02:5a:9b:
c2:a0:a8:90:57:cc:34:44:4f:16:43:ea:f0:bd:bb:
c9:c4:f7:0e:9b:e6:17:42:1e:fc:11:ae:a0:6d:7e:
14:32:89:6c:21:a5:25:c1:6b:cc:84:f9:33:93:ca:
86:44:b5:06:8d:80:7e:03:ed:04:83:6c:16:5a:53:
18:3e:b4:72:74:cc:21:5d:f6:80:2d:de:d8:c5:2d:
94:08:66:24:ca:18:d3:22:42:56:88:c9:07:32:9c:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:87:C5:BF:1C:45:EE:14:C3:E9:95:3D:27:CC:B4:8F:0E:D9:DB
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:38:91:bf:07:ed:6b:38:45:29:7b:0e:a2:b7:14:9a:0d:32:
fa:20:8e:fc:6d:73:78:b4:ef:ee:e0:6b:f3:05:ea:5d:15:03:
1f:af:9b:67:47:48:fe:e0:8e:af:7c:60:c2:cf:33:42:67:5c:
f9:a8:3d:97:57:2e:63:0b:66:c2:a9:6a:76:db:0f:28:66:5e:
5b:2f:68:ec:44:3d:72:19:6f:2e:d8:95:0f:7f:9f:4b:39:a5:
53:84:02:d0:77:e5:63:65:1b:a7:12:f6:4f:10:13:1a:d3:dc:
b5:8a:f2:92:a3:ed:f6:f2:08:15:5b:c4:d8:40:5c:70:58:45:
72:02:2c:12:95:84:37:8c:22:2c:04:7e:6e:a4:9e:e8:8c:b7:
eb:69:6c:f2:85:00:82:b6:04:15:df:a4:60:fd:5f:8f:04:c1:
55:6b:c3:c7:72:5c:03:e1:94:f0:b0:20:41:56:c6:f5:cc:86:
fe:53:56:12:0c:22:f2:8f:6e:6f:1f:77:cb:8d:c1:93:1a:88:
ff:48:2f:11:fe:56:82:92:b2:7f:c6:04:98:f5:49:cf:f0:fb:
c6:b1:55:7f:00:b9:68:ff:b4:dd:cd:e5:0a:6a:bb:8c:16:45:
e1:f0:9d:81:7b:6d:3f:f0:f5:67:4c:aa:96:2d:dd:67:eb:27:
cb:e1:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:42 2025 by rpki-client