Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: SVT0F6e8YoC3ORKb7pJEGl94WSN+Zi2dBS8ZFdL6QJE=
Subject key identifier: 6D:B3:B7:CB:99:B6:55:3D:87:B2:42:D6:4F:9D:13:39:8B:9C:D1:40
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 019877BFDDEF39A010683E255865D10CF297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0E7F
Signing time: Tue 05 Aug 2025 01:01:59 +0000
Manifest this update: Tue 05 Aug 2025 01:01:59 +0000
Manifest next update: Wed 06 Aug 2025 01:01:59 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: oOZj3lDqM0I+5n9TL/Fn8osrHdS1A3grftafZhFoimU=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:bf:dd:ef:39:a0:10:68:3e:25:58:65:d1:0c:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Aug 5 01:01:59 2025 GMT
Not After : Aug 6 01:01:59 2025 GMT
Subject: CN=6db3b7cb99b6553d87b242d64f9d13398b9cd140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:cd:d6:9b:d0:62:95:ca:d0:03:f0:36:b1:
2f:7f:f6:6a:69:67:18:c4:24:f7:3d:54:4c:81:cb:
d9:84:d0:9a:30:7e:21:4d:e9:ba:61:25:9c:08:05:
92:d9:84:0f:a5:4a:9e:f5:3a:92:71:d7:e8:01:32:
a6:1a:19:ed:4c:68:32:37:c1:4c:8e:ce:2e:a5:e8:
b2:e8:1c:89:a8:ba:7c:a6:21:42:63:0f:63:91:17:
87:a7:0a:10:3c:36:a0:56:19:eb:a0:ae:25:85:be:
b7:8d:da:3d:50:8c:9a:be:30:f2:f4:3d:9a:de:72:
4c:4b:6b:e8:6d:bf:0a:48:79:eb:34:72:d4:43:f9:
4d:b6:39:f4:87:6e:85:0c:a2:24:68:8b:f1:c7:cf:
f3:fb:cc:23:6f:16:42:2a:8c:c9:a5:ab:e4:21:24:
47:fa:3d:3a:14:57:ed:00:9c:77:81:9f:d9:44:6a:
4c:56:39:24:ab:99:f0:7a:b6:57:71:fc:90:7f:e2:
b5:82:17:8c:d5:2f:90:ab:d0:24:df:a5:0b:74:af:
88:e1:ef:f1:11:f7:73:e5:ee:1c:56:7b:e0:6f:7e:
3b:e3:46:da:0c:9f:57:b9:92:5a:76:54:d5:61:04:
e2:8e:92:d9:d9:ec:a3:75:6b:da:b9:1b:d8:0d:c8:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:B7:CB:99:B6:55:3D:87:B2:42:D6:4F:9D:13:39:8B:9C:D1:40
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:7c:fc:81:cc:9e:6b:75:52:3e:1d:15:74:73:77:c9:ae:
26:5f:24:47:0f:2d:16:41:2d:9f:83:03:27:b4:52:c0:e0:1b:
a1:ea:d5:ad:f1:33:59:56:5f:2d:b2:9d:57:dd:a1:46:22:5c:
e6:5b:97:95:6f:cd:f6:83:ee:97:8a:0f:ee:83:37:60:d0:66:
44:32:18:7f:e2:45:54:13:5e:c6:1f:4f:fb:2a:c4:ae:b6:5b:
09:34:3d:7d:1b:20:9e:e6:4b:10:c8:f2:a3:92:af:82:a8:26:
6e:df:2a:2c:d0:f3:68:3d:07:ec:c2:4a:cd:c3:74:4d:1f:b0:
c6:a1:f5:03:c3:ab:65:76:5b:62:de:ac:51:a5:6a:84:a8:b0:
c3:c3:65:32:7d:66:c9:51:b4:57:57:b3:6b:be:4e:c5:2f:6a:
48:aa:70:a7:4f:50:7d:5d:7d:0e:1e:59:de:cc:6e:f5:a1:12:
04:8e:c6:ca:2c:66:67:e1:d5:1c:3c:62:4a:c7:99:27:87:c4:
e5:53:23:db:fc:a6:c5:3f:2c:7c:08:2a:7a:22:98:52:23:54:
1f:77:13:d6:53:7c:69:ee:25:19:46:5e:65:03:a0:e1:85:40:
25:b2:54:cd:7d:5a:d0:75:d8:64:9c:75:24:cd:40:6f:66:d4:
d4:1d:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:53 2025 by rpki-client