
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: +Nz22xFTZUDRooDGEBM+ddxbx/GjRpLHfpn2+ZP82e8=
Subject key identifier: 8A:DC:C5:D7:F1:3D:0C:A1:3B:76:F0:11:3A:70:8A:7A:CD:B1:49:34
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 01988B7C9B5A7AFB1AA502B69E8372843045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 21:00:55 +0000
Manifest this update: Fri 08 Aug 2025 21:00:55 +0000
Manifest next update: Sat 09 Aug 2025 21:00:55 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: H4oJqpHZiPbxILulD9Y4CiL64bPMx5lFKoIpl0ymS8o=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:9b:5a:7a:fb:1a:a5:02:b6:9e:83:72:84:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Aug 8 21:00:55 2025 GMT
Not After : Aug 9 21:00:55 2025 GMT
Subject: CN=8adcc5d7f13d0ca13b76f0113a708a7acdb14934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:07:ff:56:59:f6:ff:26:33:b7:36:2f:fd:
28:d7:64:f4:30:c8:ff:c3:1d:67:6f:cd:56:ba:60:
71:a2:a4:f0:55:cd:c5:89:61:79:87:3c:7f:1c:00:
45:b4:f2:29:fe:2a:98:f0:1f:1d:2e:7b:a6:27:1e:
3e:90:99:8f:ef:4b:87:2f:79:f1:93:8e:5c:6f:23:
d0:53:a5:3d:41:65:ea:c1:48:1e:27:6a:df:2b:ef:
6d:31:c1:d4:9e:80:20:d8:d4:6d:15:0e:4a:69:c5:
13:d3:b8:85:5f:7f:e3:fd:f2:c0:8b:0d:f2:f6:93:
c7:35:c3:08:a9:3e:a8:c2:07:ff:e7:a5:7e:c4:83:
f1:ab:38:ed:4a:6a:24:75:cd:73:0c:6e:7b:fb:7b:
18:5e:5c:f4:fc:a9:bf:55:4d:7c:7d:c5:0c:06:84:
e0:91:fd:f3:af:cb:73:40:9a:06:7b:5d:23:52:a1:
2f:c2:39:e2:f5:8a:07:ce:8f:28:6a:6f:a0:1a:55:
8c:32:e2:aa:ae:4b:4a:29:10:98:6e:fa:02:75:80:
50:a2:ef:36:77:bd:7a:f3:af:15:53:55:f2:da:4f:
b0:c2:12:88:b4:67:37:f2:9b:32:d7:6a:f0:bf:35:
c9:86:6e:9c:06:1c:a4:1d:8c:02:91:fc:48:58:0c:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DC:C5:D7:F1:3D:0C:A1:3B:76:F0:11:3A:70:8A:7A:CD:B1:49:34
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:42:a6:f8:7a:4e:26:2e:91:a9:6e:34:3b:bd:03:ba:d3:
97:3b:c1:7e:9e:49:6e:ae:b0:32:80:b8:cb:cb:a4:16:33:a2:
92:98:d4:3f:59:3c:ca:d4:a2:a8:04:cf:37:bc:84:46:e8:52:
9b:cf:cd:a4:f4:49:e7:4c:cf:90:fb:4a:f2:03:c6:17:15:d1:
83:a3:00:a4:5a:71:c6:76:e1:c2:2c:fb:6e:1b:52:83:98:6c:
b6:2e:d1:66:e1:88:6d:22:6d:8b:63:3a:12:1e:c1:ec:2a:ed:
e1:e0:3a:95:9f:15:58:31:3f:ec:64:71:a1:66:a4:20:b6:8e:
a0:04:93:6d:5d:cd:3d:2b:2c:60:d2:37:72:28:64:64:4a:f3:
19:46:22:21:60:33:a2:53:43:12:c0:08:e3:d0:0d:a9:53:11:
de:23:90:b7:48:a7:1a:cd:5a:57:01:47:37:54:68:15:ef:25:
cf:f2:cd:8f:70:47:b2:ad:e3:7a:f6:c5:fd:55:5e:dd:34:db:
07:b1:d9:3f:db:ba:1b:65:cc:ea:3f:f8:91:a8:f7:80:90:d8:
f1:4a:05:00:11:b5:c5:5c:69:0d:8b:7b:28:55:60:cb:d6:d1:
90:00:30:a3:49:d4:8b:9d:6f:b8:45:15:f7:54:97:3e:cb:2d:
e5:9b:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:33 2025 by rpki-client