
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: Ah8EzmvCbYnX9fMR6Qis385lO6XQPiTkuGJXFksjxTY=
Subject key identifier: 25:3B:EB:C1:97:69:C8:1E:35:90:51:34:B7:0A:46:39:C4:3A:2B:AC
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 01987418A5F91BDBA4FB4E78A5A0147769EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:00:28 +0000
Manifest this update: Mon 04 Aug 2025 08:00:28 +0000
Manifest next update: Tue 05 Aug 2025 08:00:28 +0000
Files and hashes: 1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: Akm2IuWsaQdiLWyeUhWyJltwAKar+atoGih+laxV+fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:a5:f9:1b:db:a4:fb:4e:78:a5:a0:14:77:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Aug 4 08:00:28 2025 GMT
Not After : Aug 5 08:00:28 2025 GMT
Subject: CN=253bebc19769c81e35905134b70a4639c43a2bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:82:88:12:ce:b9:0d:87:e4:61:20:b5:47:
9f:b4:9c:64:de:54:53:dd:ce:65:5d:b2:e7:ba:77:
73:39:1e:d7:e9:e6:cf:53:e3:2e:8c:69:7d:40:dc:
90:05:51:50:66:47:87:7d:ba:21:ff:e6:3a:90:f6:
64:dc:44:c4:9f:37:4b:13:8e:ea:73:a7:7e:84:f8:
cf:2b:ea:ae:b0:9e:ed:02:ee:67:b7:58:5b:9f:14:
1d:89:06:8c:d7:70:e0:3d:eb:e1:cd:34:44:c9:13:
8d:c0:b1:1b:7b:16:7d:39:48:a4:08:bc:ce:d4:68:
20:4a:9a:32:11:d4:92:98:04:0a:6a:04:0e:1d:4a:
58:2c:80:30:41:7c:48:f4:5f:9e:07:51:84:2e:33:
49:50:17:53:c6:a5:83:e4:c1:14:4d:9f:08:b6:e6:
31:be:b7:13:7d:7f:d8:b7:fb:6a:45:8c:bb:fc:4c:
ed:06:f0:79:bc:53:a6:7f:66:b7:43:f2:6b:08:c7:
17:c2:5d:93:c0:b5:11:2f:6c:c4:52:37:b6:2c:16:
2c:82:1a:a0:c0:6d:47:3a:50:9d:69:ed:f4:a3:8b:
8c:f8:ea:95:38:a4:46:5b:dd:a2:f7:ba:a7:6b:31:
de:1b:ae:4d:ed:95:b4:4b:b5:da:1b:8d:9f:dc:d5:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:EB:C1:97:69:C8:1E:35:90:51:34:B7:0A:46:39:C4:3A:2B:AC
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:81:a5:6e:06:94:2b:1f:e9:c1:f7:ae:df:06:f1:34:b7:2b:
8f:cd:a2:8b:f9:0f:7b:9d:84:8f:10:dd:c0:9a:9f:16:1a:e6:
ee:3c:96:54:6f:74:99:c3:93:71:fc:7a:c6:79:7c:95:f2:5f:
df:0a:b3:1f:04:49:c8:5c:2b:9f:e0:d1:d5:a2:98:b4:65:00:
f4:22:49:9e:c4:0d:90:1d:93:a9:55:7e:34:0c:35:51:c1:11:
e8:11:10:da:d4:24:96:4d:42:37:b2:af:bc:ab:32:41:05:d9:
b4:69:08:26:c8:6b:e6:86:d6:78:e9:e0:ea:c8:cb:f7:30:44:
23:7b:a3:07:ab:19:a0:ee:cb:f4:e3:c4:11:22:f9:bc:2e:87:
70:b3:1c:cf:d7:57:b8:74:0e:f1:2e:34:92:27:99:6c:9f:c4:
f8:03:bf:78:66:87:7b:85:de:64:4c:7b:05:7d:fa:7e:ae:7f:
a9:0c:7f:9c:6c:5d:f5:9e:4b:5a:14:09:d2:a8:40:85:10:27:
23:b1:3f:59:1e:c2:f3:c6:96:1f:f2:10:09:f2:d4:1f:2f:10:
58:30:21:46:cf:9f:6e:db:5c:2b:17:64:8f:fa:c0:c7:f1:5e:
b2:c2:b6:93:70:cc:21:18:8f:57:17:2e:d9:7e:8f:42:76:a2:
55:4a:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:03 2025 by rpki-client