Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: S9do2UNERCj6iz35+vc8qDKtayBYqx+f37RvOtD8mhM=
Subject key identifier: 44:10:9B:76:A7:71:C0:47:8D:CA:47:2C:BC:02:75:1D:37:D5:F8:20
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 01987418F9AED4D28B4F37D28154378F35F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 08D2
Signing time: Mon 04 Aug 2025 08:00:50 +0000
Manifest this update: Mon 04 Aug 2025 08:00:50 +0000
Manifest next update: Tue 05 Aug 2025 08:00:50 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: nYUZY7CTYnEKi2oMG9hxnc3cWFw2aVP8R3Xm/lOoypc=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f9:ae:d4:d2:8b:4f:37:d2:81:54:37:8f:35:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Aug 4 08:00:50 2025 GMT
Not After : Aug 5 08:00:50 2025 GMT
Subject: CN=44109b76a771c0478dca472cbc02751d37d5f820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:14:18:0d:2d:28:00:60:ba:de:00:04:dd:
16:15:78:b0:65:dc:04:5c:05:63:20:84:30:85:12:
b9:d7:52:17:79:db:09:21:22:40:77:ef:9e:64:75:
b4:30:1f:49:ba:b8:2a:19:49:cc:f8:28:01:85:92:
fd:29:af:f8:2b:b7:2e:f5:5c:b2:7d:2f:cf:82:38:
89:ec:8a:04:90:79:ef:82:0a:73:4f:f3:57:0d:6f:
7c:4f:f8:a7:1f:c2:9e:76:0b:2d:37:c4:5d:02:b6:
28:ff:68:2d:6e:26:ac:0f:be:56:2c:a3:c4:4d:34:
76:e0:72:28:28:71:cf:79:f7:b4:68:83:fb:05:dc:
89:74:1b:d2:da:64:b0:f0:38:ec:b1:21:1b:a2:b6:
68:94:60:bc:62:ca:f2:b8:a9:e5:8b:2d:67:d7:ca:
b6:4c:c2:ef:d0:91:16:e0:3e:6c:04:41:a4:5a:b2:
be:06:4d:36:a9:ed:4e:18:1e:7a:4d:1f:26:98:62:
52:4c:84:88:14:d5:19:05:78:56:3f:be:7b:d1:ae:
68:90:ad:1d:1b:06:b5:9c:53:b3:e4:7b:20:72:d4:
70:ca:e2:7f:ec:1a:70:2f:32:5f:95:2b:f6:d1:d9:
77:66:34:50:21:21:42:bd:20:be:9e:75:b6:e7:a9:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:9B:76:A7:71:C0:47:8D:CA:47:2C:BC:02:75:1D:37:D5:F8:20
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:7b:06:56:3b:8b:91:52:4d:37:dc:60:6d:85:d0:ac:8e:
58:40:31:96:16:ef:e9:94:bc:ce:9c:ad:a4:2b:d2:d1:06:11:
a6:8d:db:c4:6a:a9:d6:b6:b3:da:43:37:c8:bf:6f:f8:0b:b2:
df:39:68:0c:32:6b:fe:ca:34:34:bc:17:05:d2:40:38:d1:59:
8f:7a:4f:25:66:f4:85:5f:77:fe:f0:c3:99:8a:0e:1b:f7:ab:
35:5d:3c:16:35:b7:93:8e:db:5b:06:f3:b1:95:7c:19:ca:c5:
0a:36:83:a7:ca:11:82:f7:91:d6:1f:4f:b4:f6:26:01:32:80:
c3:e3:59:42:87:28:c4:6e:6d:35:34:a8:bc:65:a4:f0:74:21:
bd:ca:52:04:0f:68:42:d7:87:5b:4e:d1:8d:4e:5c:8f:a7:82:
88:90:fe:61:f9:13:6a:99:7c:bc:6a:8d:b6:be:1b:98:16:e9:
9e:c5:bc:68:f5:74:e1:c1:ba:a6:a9:6f:d0:8e:d0:83:a3:0f:
a5:64:ce:99:09:ee:d2:b8:37:9b:3f:b1:4b:cc:36:88:7a:bc:
65:4d:66:a5:e2:a4:fc:0c:96:9b:b8:3b:04:15:9f:b7:dd:0d:
9c:81:ce:78:1e:33:aa:46:a6:e6:6b:7b:87:20:2f:9e:b9:1d:
ed:18:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:04 2025 by rpki-client