Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: NXZRPI4RfDJ60rdujeS4GpAg1kZLBRfqh45QbzTTvSQ=
Subject key identifier: F2:CE:94:68:E6:D3:A0:B4:61:B9:4D:D1:39:E5:73:E7:4F:3E:01:3E
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 019889574496D5C34E6511E837297441D7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 11:00:54 +0000
Manifest this update: Fri 08 Aug 2025 11:00:54 +0000
Manifest next update: Sat 09 Aug 2025 11:00:54 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: xnC9xV1muvNWb6UtGlNRRv9xGXipG6Bq2/zvZi/x6K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:44:96:d5:c3:4e:65:11:e8:37:29:74:41:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Aug 8 11:00:54 2025 GMT
Not After : Aug 9 11:00:54 2025 GMT
Subject: CN=f2ce9468e6d3a0b461b94dd139e573e74f3e013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:ae:78:46:b9:e3:a0:2a:fc:11:b1:08:7b:
46:b4:ef:8c:92:08:01:b4:97:03:73:9f:ca:48:35:
8e:8e:af:11:ee:db:69:42:51:b5:4b:2c:9d:db:1f:
d8:5b:49:95:50:47:53:ed:33:14:76:9d:ff:2d:93:
ba:1f:b5:80:6f:fd:10:3e:98:d5:58:83:a2:88:89:
8d:d9:74:4d:38:c9:28:c4:96:57:0f:9b:43:f0:6b:
b3:28:26:b2:dc:16:f8:bc:22:84:d1:76:96:fb:79:
00:ef:a0:71:31:57:cf:82:60:ba:33:56:4f:34:47:
d1:77:de:43:a4:81:67:4f:3d:98:2b:ae:e5:46:7d:
4a:32:3d:d2:bf:ba:e9:c8:c8:ac:98:bb:09:f0:13:
60:d0:d7:58:b3:84:4b:68:80:de:e6:f0:cd:e2:f8:
69:74:f5:2e:a7:c6:78:23:2c:90:09:cd:8c:d3:56:
1f:24:63:f3:94:3c:83:47:b4:e6:00:46:4c:ba:61:
01:50:75:9f:af:01:20:bb:24:10:17:9a:34:05:ae:
75:32:fe:b1:04:07:23:1b:a6:d4:ad:cc:1f:59:fc:
bc:16:1b:52:d3:9c:5c:ed:f6:f1:27:cc:17:da:61:
00:98:32:81:7d:1f:b7:99:50:6e:3f:f6:8e:40:f1:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:94:68:E6:D3:A0:B4:61:B9:4D:D1:39:E5:73:E7:4F:3E:01:3E
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:63:e4:42:2a:69:73:d6:aa:42:f1:ac:97:ad:0f:7e:30:f5:
f1:29:ee:2f:b9:6b:c3:a4:14:a1:d9:5a:86:3f:2a:b5:09:7a:
44:95:ac:cf:ab:64:db:32:d1:78:d8:c4:5e:66:69:d1:7f:b9:
02:3f:3a:17:d0:84:0c:1d:78:55:79:b9:5c:dd:17:a4:70:39:
29:73:00:65:ca:35:82:94:89:02:2f:3b:e4:bf:46:ba:18:10:
75:f8:80:88:72:24:c7:29:49:b6:3e:c8:36:d6:89:85:37:39:
62:e6:86:92:e1:05:2e:c2:44:16:8e:a5:77:52:4e:95:ad:3f:
43:29:fa:ec:84:09:6d:71:82:3e:90:3f:4d:05:6f:2d:9b:75:
f9:db:b8:dd:2e:de:7e:5b:4b:f6:dd:55:70:4d:b8:08:a9:bb:
6f:a5:44:74:3e:44:c8:fb:41:b8:56:2a:7a:fc:d2:1a:04:54:
40:61:a4:b6:e7:c6:fd:9a:24:08:f9:85:77:f1:7c:e5:44:af:
88:27:01:47:8d:c5:38:f7:e2:4f:44:dc:c0:43:c3:00:e1:ce:
e8:4b:ef:3e:c1:d4:02:50:fd:3c:ef:d4:15:0b:94:4b:e7:e9:
dd:54:ef:84:e3:03:f5:37:41:8b:32:76:3f:40:3c:4b:24:59:
0e:61:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:53 2025 by rpki-client