Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: rpQjJtUcI7bk05OmYIL7tUhV4ugXf4o8FPtj9201vxI=
Subject key identifier: 91:94:42:B7:E9:47:3A:AA:AA:FB:01:03:7D:DC:41:B9:73:3B:3C:D4
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 01988431323A2EC127BBD7F5C03CC48103F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 0175
Signing time: Thu 07 Aug 2025 11:01:13 +0000
Manifest this update: Thu 07 Aug 2025 11:01:13 +0000
Manifest next update: Fri 08 Aug 2025 11:01:13 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: tFGcKMIagO/XYFybZpOSsCEO3VGcM4brYOs27oZrZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:32:3a:2e:c1:27:bb:d7:f5:c0:3c:c4:81:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Aug 7 11:01:13 2025 GMT
Not After : Aug 8 11:01:13 2025 GMT
Subject: CN=919442b7e9473aaaaafb01037ddc41b9733b3cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:32:7a:be:c7:ef:4d:b8:5b:c1:cd:a4:99:
5f:87:30:ed:31:96:01:62:25:5e:b8:77:da:49:68:
21:52:be:05:11:04:d5:09:eb:ad:9d:72:2c:05:f5:
68:fa:3e:e6:99:cd:86:4b:24:cb:28:e9:fc:f7:38:
a9:6b:f1:89:c3:f9:04:ee:1a:7a:36:f8:a4:2b:a4:
cb:08:88:d3:09:fb:22:74:39:98:13:15:77:0c:a5:
dd:b7:a1:7f:5a:6b:c3:e6:87:63:44:da:89:85:ef:
00:7a:45:98:87:93:09:e4:83:e9:28:12:2e:e3:2c:
1c:73:ce:9b:2f:1f:93:e5:f8:0d:67:7a:82:43:01:
50:fc:e8:57:d8:2e:14:3d:da:eb:d4:83:7e:79:ce:
fb:3e:f8:a0:c7:1b:66:2e:02:9c:c7:21:b0:2f:91:
2d:24:af:e9:44:b4:da:f9:17:25:8a:43:c6:0b:ab:
45:c4:45:7d:d3:ba:9d:7e:52:51:b2:50:4f:ef:77:
23:96:6b:19:24:d8:4b:63:40:8b:d8:3b:39:7b:ac:
23:b7:20:7a:f3:43:00:79:13:e1:65:02:f4:6d:4c:
86:e0:9b:53:56:ce:c1:70:ab:0b:4a:d8:5a:56:11:
37:c9:79:84:45:32:a6:1f:65:ba:cb:f1:d3:1d:dc:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:42:B7:E9:47:3A:AA:AA:FB:01:03:7D:DC:41:B9:73:3B:3C:D4
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:10:ff:04:c1:4b:ea:e7:b5:17:35:29:e7:60:ce:76:cf:
da:90:53:ee:02:7b:c6:0e:6c:a7:91:8c:af:41:af:2e:91:b1:
5a:38:4b:b7:da:10:e7:cf:d0:2d:ba:23:5d:10:23:c6:45:ff:
06:62:7e:97:62:e2:19:8a:fd:61:c0:a5:66:42:52:c1:ab:44:
42:b4:cf:82:f0:19:c8:28:34:78:7e:06:a1:1e:01:ae:3e:cd:
d6:d3:d3:b4:6f:fb:74:7a:90:c1:e6:7a:68:82:9a:7c:ca:12:
aa:82:09:0c:ff:43:2d:19:64:60:a7:f0:e1:fe:e4:8a:95:41:
78:b1:8a:f2:b0:47:3c:33:59:8b:16:2c:ed:f6:be:51:a4:14:
7d:c8:a0:f4:7b:82:54:25:4a:d1:d7:d8:51:0f:d7:10:c7:a6:
1e:58:91:ec:b7:88:b5:fe:ce:6e:d9:0f:92:f0:00:96:7d:bb:
f0:be:68:8f:f8:11:8b:b1:ed:98:d6:6c:a3:76:24:e5:fe:39:
c2:a2:6a:69:8b:bb:d6:af:6a:fd:5b:cb:6e:b8:be:ad:be:86:
1a:9e:97:c0:d9:0d:52:01:41:9d:d8:19:c2:f0:6c:51:7e:5d:
b8:10:8d:c4:9e:88:90:5e:e2:3c:4d:fb:ff:3d:1b:40:ff:17:
d9:98:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:55 2025 by rpki-client