Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: kBk8M37YZ0OzrqQxhLM22XAv8W0PvGox2KMzkm2ZQ2U=
Subject key identifier: FA:98:C8:23:F8:9D:16:EB:C1:5B:37:C0:52:71:B9:B4:15:EA:66:86
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01988C8EE4A89EECD1BD51FFD035954AE3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 162C
Signing time: Sat 09 Aug 2025 02:00:31 +0000
Manifest this update: Sat 09 Aug 2025 02:00:31 +0000
Manifest next update: Sun 10 Aug 2025 02:00:31 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: hGPiMDLSwe+dSEzg2Ddg25RBmePxNKoR2KntlbsB3yI=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:e4:a8:9e:ec:d1:bd:51:ff:d0:35:95:4a:e3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Aug 9 02:00:31 2025 GMT
Not After : Aug 10 02:00:31 2025 GMT
Subject: CN=fa98c823f89d16ebc15b37c05271b9b415ea6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:44:05:67:98:df:1b:bf:eb:f1:ca:d2:5f:
2b:d5:be:b3:77:ab:60:26:94:62:51:d2:9a:c5:bf:
57:90:19:05:61:39:b1:87:a1:d0:1e:50:28:bb:c7:
9e:d4:20:96:39:5e:79:3f:61:69:2d:76:f1:c1:2d:
9c:b4:eb:e6:74:08:a3:7b:43:08:25:66:ea:0a:4e:
e2:44:58:21:46:bf:d1:94:d6:97:1d:cc:4c:3f:31:
c4:fb:3f:72:f0:bc:07:7a:da:13:92:12:48:e3:5c:
ec:60:07:fa:38:bf:b2:2c:19:fe:67:84:f8:73:c4:
14:46:2e:83:25:53:c6:31:ea:b7:95:df:37:5d:66:
57:ff:7b:18:0a:a7:ff:95:43:3c:42:e9:2c:c9:71:
b6:5e:10:79:21:61:ee:09:78:b8:7e:66:95:34:42:
22:20:39:b5:d5:c3:cc:c0:ca:71:6c:b2:db:4a:23:
07:81:69:f8:05:ed:54:c0:a4:d4:34:e1:17:40:84:
0b:1d:a2:d5:f8:6f:c2:88:bc:3e:73:4d:4f:ae:7f:
a9:ad:c2:fa:bf:cf:1e:51:ee:1a:95:3c:59:0f:3a:
c7:57:c8:19:62:7e:45:8e:76:a4:b9:42:61:c9:4a:
39:bb:08:6c:96:18:75:43:d7:f9:8b:20:16:f2:1c:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:C8:23:F8:9D:16:EB:C1:5B:37:C0:52:71:B9:B4:15:EA:66:86
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7d:92:23:b7:5e:01:ae:36:21:b4:bb:f7:c2:a4:91:ec:ef:
35:6b:95:ee:7e:38:b1:15:08:3b:4b:85:83:0f:55:2b:c2:e8:
05:42:fe:cf:39:a0:bf:f5:1b:83:aa:83:83:13:81:47:99:81:
01:f9:20:69:c7:b6:00:3c:a1:96:cf:c1:1d:17:ce:4f:dd:09:
aa:98:1b:d1:d5:84:b4:f3:46:e9:88:e3:38:8d:09:69:aa:e4:
37:78:08:cf:61:09:86:a7:c5:b4:77:f0:43:df:19:10:64:a8:
74:87:9d:82:d8:0d:f4:bc:9f:cd:f8:7d:df:cb:d1:2e:57:dd:
53:58:62:79:84:57:b0:7c:2e:44:ab:c0:1e:b4:31:c4:91:cd:
21:e6:0d:85:95:23:5a:cf:4f:a6:91:47:a3:40:34:30:81:4e:
f2:d9:d9:ad:e7:a3:ea:55:fa:15:14:a5:6e:33:3f:5e:6c:8d:
7e:6c:3f:55:6a:6f:25:3b:61:17:6b:9f:6b:0b:cc:4d:da:19:
22:63:3b:66:ce:f9:97:95:f8:0a:2f:da:11:66:28:ee:80:5f:
7c:27:fe:82:4d:b7:5d:55:b1:23:14:cf:35:36:70:a7:53:d3:
6a:ab:45:9f:69:bb:61:2a:8f:d5:f7:a3:77:7a:3c:ab:87:5a:
0a:d9:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:07 2025 by rpki-client