
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: SSzFTI+cvJfkzKP1qodMMdS3gJuHDyq8J1MyhIqK5YA=
Subject key identifier: 43:32:21:82:92:14:43:63:51:3B:7B:63:8A:D2:C4:82:01:34:CE:9D
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0198820B705F82ED99B442CE5F190D274BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0CED
Signing time: Thu 07 Aug 2025 01:00:44 +0000
Manifest this update: Thu 07 Aug 2025 01:00:44 +0000
Manifest next update: Fri 08 Aug 2025 01:00:44 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: ageqlIa+ba9lqXIHuZ9QksUOoSSS60nLxtoTWsHA8aw=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:70:5f:82:ed:99:b4:42:ce:5f:19:0d:27:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Aug 7 01:00:44 2025 GMT
Not After : Aug 8 01:00:44 2025 GMT
Subject: CN=4332218292144363513b7b638ad2c4820134ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:f9:8f:dd:7f:0a:9e:23:a9:c4:67:53:f9:
9e:3a:90:98:3e:48:54:b1:bf:80:95:6c:ae:07:21:
50:4f:71:4c:1b:e7:bc:8e:12:96:b7:11:b6:85:a7:
50:c0:67:8f:62:77:1f:ca:00:bf:27:23:c4:f1:2a:
71:6c:4c:df:26:11:b9:d8:20:c2:35:24:92:4a:ea:
12:34:21:6f:cb:38:22:14:e6:48:51:bb:11:53:47:
ca:87:0c:9b:97:aa:f1:86:1d:c6:d9:f1:16:9f:8b:
39:c5:f3:d9:f3:a6:ad:c5:04:68:fe:71:3b:0f:ad:
de:66:51:91:27:4e:23:4f:fd:20:6c:a4:95:d0:21:
e1:9b:73:01:36:9e:f1:22:53:eb:01:20:c5:04:7a:
25:02:e0:c6:7b:38:3a:94:ab:c6:92:6b:3c:6b:39:
58:b5:0c:92:2b:ea:31:90:de:97:71:a4:f7:d0:73:
c2:80:75:16:16:6c:92:32:12:b7:42:43:2b:60:08:
79:49:e7:fe:80:aa:21:69:86:0e:29:51:7f:bc:f5:
aa:35:95:ec:6b:a0:d0:a0:27:23:8f:45:08:9b:9c:
5b:41:d3:8f:55:45:5e:79:9b:59:bf:d1:ef:90:86:
e0:aa:ff:20:06:3f:70:cc:b4:ec:7b:4a:c2:42:6c:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:21:82:92:14:43:63:51:3B:7B:63:8A:D2:C4:82:01:34:CE:9D
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:87:a8:0d:ca:19:14:a9:e2:3f:24:a3:b2:17:6a:df:19:
c9:c1:a7:ac:59:84:3d:c4:7d:20:0b:ca:73:54:e3:9d:0c:b7:
e7:ea:6c:80:78:74:c5:9e:0c:3e:1a:3f:9f:12:e3:69:50:63:
0a:71:a7:4f:b0:7f:ed:a1:88:23:d3:d0:85:44:78:02:69:3e:
44:f6:02:1a:62:06:be:89:90:f0:14:7d:11:a2:7d:43:f6:f9:
92:20:c0:85:cc:7a:b9:f5:96:4d:7d:79:d5:ee:9e:da:0a:6b:
96:d7:d2:4a:8f:ac:93:15:6e:cb:4d:d9:e6:fa:c0:ab:e4:13:
33:39:8c:90:57:8a:d5:8c:57:20:24:84:5e:e8:75:a6:db:4c:
44:d8:22:44:56:66:35:09:33:e7:fc:50:3e:75:75:18:fd:08:
fd:ea:37:bc:e7:db:2a:86:dc:3b:2f:01:16:5b:dd:c2:da:3f:
70:23:87:78:30:21:d0:91:68:f3:42:18:f6:17:9b:1c:a6:ba:
56:6b:78:25:4e:6c:64:da:a3:6f:b8:0f:f1:3c:c4:c8:22:a4:
9e:ef:96:2e:82:56:2a:23:36:c8:fd:75:0d:ee:68:0a:99:e3:
28:df:9c:d8:f7:03:7f:e1:33:ef:2a:bf:27:f1:13:9f:9d:65:
6f:63:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:35 2025 by rpki-client