Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: gz6X/EW2wD3kqhRJ5CTvD+k5tUz8KBQ59zo3pXIbJwE=
Subject key identifier: BE:66:4D:F8:F1:E1:6C:33:62:ED:8C:56:A2:85:C2:01:6E:EA:19:E4
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 0198733D45BEEE8882D7BAC91979D6932604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0BDE
Signing time: Mon 04 Aug 2025 04:00:52 +0000
Manifest this update: Mon 04 Aug 2025 04:00:52 +0000
Manifest next update: Tue 05 Aug 2025 04:00:52 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=)
3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: Y2OMNNIOl0uoexDh7pf6IqdgoxmC033VOGR6XUC2tvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:45:be:ee:88:82:d7:ba:c9:19:79:d6:93:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Aug 4 04:00:52 2025 GMT
Not After : Aug 5 04:00:52 2025 GMT
Subject: CN=be664df8f1e16c3362ed8c56a285c2016eea19e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:7c:58:19:a1:98:f1:0e:98:f9:6d:70:2b:
e7:bd:6a:8e:cb:71:9d:2f:81:c8:65:05:dd:94:62:
25:09:c9:f9:ee:bb:c8:23:9f:b9:43:a0:86:4a:a7:
0e:ae:62:ed:0f:3f:25:9e:0e:a8:04:b5:b2:48:b2:
5e:3b:ca:a0:5c:1e:61:65:1c:de:2c:cb:35:1f:04:
18:90:ca:03:38:fd:67:7a:57:ac:22:83:48:fd:fe:
ed:0f:44:80:33:0e:d5:71:5b:d3:1a:ed:55:36:1e:
4a:d6:16:32:0f:ab:46:e8:de:af:2b:fe:6d:b5:2a:
3a:db:4c:af:c0:31:e0:f3:a3:d9:6f:56:f2:e8:aa:
4a:49:7e:41:3c:b7:6a:ec:43:ca:95:35:53:2c:f1:
ce:27:86:79:32:b7:e2:e1:b2:da:41:37:73:78:75:
27:5c:ad:a6:10:24:38:8f:40:12:1b:6b:1d:19:0c:
72:ce:f5:14:4f:5c:6b:ff:a8:95:4e:90:4f:60:24:
8b:b7:6a:a9:71:a3:3a:bf:d2:b9:6e:01:10:a2:9b:
15:ff:08:3f:b1:22:74:e9:68:08:ed:59:90:ed:7c:
9c:67:47:88:44:f3:ed:b6:a3:d1:3a:7b:e0:fe:91:
33:d0:b3:cb:fc:70:5b:e4:c8:83:51:dd:cd:59:69:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:4D:F8:F1:E1:6C:33:62:ED:8C:56:A2:85:C2:01:6E:EA:19:E4
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:77:40:bd:bc:4d:c7:c7:f0:23:3c:b6:1b:17:dd:22:ff:2a:
c5:6a:74:8c:63:4c:d1:ad:59:41:47:a1:5b:17:e9:a0:39:29:
ce:b5:b6:5d:bb:67:d0:2f:93:51:1b:b3:0b:82:3e:06:95:82:
b6:ca:bd:89:5f:75:74:a6:ef:c6:4b:d0:d3:5c:e2:39:35:9b:
9e:1b:96:9c:16:2f:0e:8f:4c:9c:5a:1c:95:be:5f:84:d6:a8:
23:e3:63:35:6a:bf:7d:a9:bd:d5:47:27:08:92:c9:c4:96:af:
59:7f:53:d9:de:7b:6a:85:03:ea:8b:49:bb:3d:ff:21:c8:57:
8a:0d:4a:d0:19:ac:28:29:7e:1a:36:5c:83:0c:40:d3:02:00:
0b:ac:1d:80:f8:21:0e:63:ba:9b:6f:46:90:0c:67:d1:e5:bd:
15:49:50:b6:76:ca:64:72:9d:d6:af:fc:3a:1b:17:8f:a9:1d:
84:ae:45:c6:ea:dd:37:68:2c:ef:57:00:85:21:81:b8:9c:c6:
a3:fa:05:70:8b:a6:f2:43:48:a5:10:1b:8b:e1:e8:c5:36:31:
2f:ac:54:44:1b:d9:8b:ea:c8:57:8b:80:60:5b:27:f4:4b:64:
4a:9b:9d:17:62:46:cf:48:b9:8a:13:b5:52:95:ee:c0:88:b7:
e7:2a:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:29 2025 by rpki-client