Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: 5z3pclxGnhPaCtzWQQL1uGyHuwxF7ps7X60FYaM40WE=
Subject key identifier: 99:AE:EC:1E:95:16:0E:A5:0A:CE:98:BC:05:C1:49:62:E3:83:CE:6C
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019873E266C4E6EC01704D29DD114F819DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: ybblhC/OKahts1WNqrHrjs4mYb3oQU4TabxjirGLl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:66:c4:e6:ec:01:70:4d:29:dd:11:4f:81:9d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=99aeec1e95160ea50ace98bc05c14962e383ce6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:c9:bb:85:71:43:70:8d:8f:50:51:15:08:
44:97:e5:47:dc:fc:ef:2a:e3:04:a1:37:d9:d0:51:
9a:52:a8:3f:12:a8:a4:bb:07:80:16:dc:55:c7:f1:
0b:1f:5f:8c:7c:95:05:27:6c:ac:62:47:f9:52:51:
cb:5c:fd:b5:9c:b8:2d:69:20:c2:92:8c:56:c1:2b:
d8:8a:91:34:d2:e3:88:cf:16:06:f5:df:d5:18:10:
a1:18:b5:e9:86:87:de:18:7a:1e:b2:ea:72:a6:ad:
e7:57:cd:5d:ad:37:cb:9d:29:b9:2a:07:eb:61:42:
b7:e8:62:4c:f6:2c:82:57:30:3a:47:ce:8a:78:ae:
2d:be:0e:c2:f4:34:14:f7:88:19:48:50:57:7f:14:
50:35:82:9b:b9:cd:d6:0b:1e:e5:f6:6f:a7:0f:f5:
2a:47:be:7b:77:5f:0a:03:76:f6:b2:8d:4e:a6:54:
4c:38:4b:8e:57:53:28:a0:c0:c3:43:e0:f8:27:41:
e8:a5:cb:b4:ef:1c:d4:f4:1c:d7:57:be:27:32:e2:
12:70:bc:47:26:ea:90:61:81:5e:0a:65:f9:e6:12:
92:61:4b:f6:d9:62:e3:5d:3b:ed:98:df:fb:be:73:
de:1e:84:6f:95:e7:e4:68:97:9c:91:20:db:1a:6e:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:EC:1E:95:16:0E:A5:0A:CE:98:BC:05:C1:49:62:E3:83:CE:6C
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6e:7c:92:d8:82:6e:bb:05:60:19:e4:8b:8c:f6:f3:51:0f:
0f:e5:45:0a:88:a5:7c:a2:f3:32:ff:f5:ba:f9:7d:03:39:bb:
1d:5d:e8:f7:30:ba:e3:c5:05:c9:ff:da:f0:7e:ca:7f:f2:23:
3c:28:c6:7b:60:01:05:ec:f3:7b:e1:68:05:41:4e:55:02:33:
e0:0d:9d:8b:6f:3c:f1:8e:d6:ba:26:be:9b:a8:d5:be:89:79:
6a:c6:f0:e9:91:d0:bf:17:37:e1:62:f5:2a:7b:f2:04:84:00:
a6:41:45:94:ba:ba:21:a0:74:60:5d:94:f4:9e:f8:37:c4:fe:
46:f2:8a:4b:bd:9a:87:c6:f9:83:ee:dd:96:bd:a3:83:05:ac:
90:54:ea:dd:aa:ba:da:9a:df:3c:b7:d3:97:ea:b5:cb:9c:10:
d2:16:22:e0:b1:43:6d:82:2e:0c:41:93:bc:29:83:ef:d6:ef:
0a:16:50:c6:a7:74:6e:7a:cc:97:ab:c2:53:d2:67:a7:62:f9:
e9:cf:1f:0d:99:5c:5a:a9:df:60:a2:f0:9a:39:3f:2e:ec:23:
2e:58:57:0b:ff:9e:79:d1:36:d6:89:02:86:e7:65:28:56:dd:
33:b1:45:6c:e9:89:23:e4:de:21:07:1a:6b:4d:11:03:39:f6:
78:b4:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:57 2025 by rpki-client