Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: y/kmaPuSwbkqmZg2j4Gup7XYpk368SmhJ5Feh/N2DD4=
Subject key identifier: 0C:FC:17:B6:48:2D:0C:FB:35:E5:38:4D:23:89:27:04:FA:8D:F6:48
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01987C406991B506DB7721526886FDA387C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0731
Signing time: Tue 05 Aug 2025 22:00:52 +0000
Manifest this update: Tue 05 Aug 2025 22:00:52 +0000
Manifest next update: Wed 06 Aug 2025 22:00:52 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: 9JhPo7IHYHz9OsCGHuMQJfLHBxWqfBz5RcQCd8yH/qg=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:69:91:b5:06:db:77:21:52:68:86:fd:a3:87:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Aug 5 22:00:52 2025 GMT
Not After : Aug 6 22:00:52 2025 GMT
Subject: CN=0cfc17b6482d0cfb35e5384d23892704fa8df648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:3e:2c:33:5f:aa:28:a2:85:1e:98:28:ab:
5e:34:df:92:eb:f6:9e:5b:04:a1:d1:2c:41:39:ba:
5d:df:f5:b0:0a:e9:f4:cf:99:c1:37:e1:5c:31:e7:
be:23:24:51:68:ec:11:81:86:fb:c7:9e:a6:d2:65:
8a:40:51:47:0d:20:05:c4:d4:ac:bd:9d:a4:d0:26:
8e:43:25:41:aa:79:34:8a:be:45:8c:fc:24:55:cd:
e3:cb:f8:83:f2:54:f7:06:9d:c9:62:e0:54:90:62:
6c:b5:7b:68:3c:a2:83:0f:c5:0b:9f:49:5a:71:71:
fa:ad:d6:34:42:1f:94:b9:2c:5f:23:e6:96:59:de:
2c:fd:ed:26:a0:c0:8c:72:93:4d:4c:bd:6d:07:ca:
7a:88:3b:5f:b9:e9:3f:fa:07:62:a0:23:3e:87:e9:
23:e0:53:a1:30:c3:1d:20:3d:76:9d:d3:23:92:6d:
21:93:41:a8:f9:18:62:9c:ae:fe:10:d9:db:f3:50:
b8:25:fd:f9:d3:c4:f8:61:9b:6c:18:ac:8e:7d:bb:
88:df:4f:db:11:b9:92:48:ec:d5:46:79:d6:31:a3:
4b:c8:95:cf:d4:97:9c:9a:de:e5:19:80:76:71:9b:
68:f0:32:e0:89:97:3c:e8:ea:0b:81:6e:d7:64:b8:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:17:B6:48:2D:0C:FB:35:E5:38:4D:23:89:27:04:FA:8D:F6:48
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:99:9c:d2:1b:07:9d:a2:99:5f:e9:54:81:23:fa:c2:89:
4d:4d:da:21:c2:c7:7d:02:86:6a:2f:7f:2e:ee:2e:36:c1:dc:
90:c7:fb:4d:fe:17:48:6a:f9:cc:26:36:e4:68:cb:92:0a:9b:
9e:4f:ac:74:9a:ce:6a:9d:59:3b:02:b9:c7:a3:44:e2:47:f6:
b9:8d:0f:e5:a6:75:b8:bf:85:c3:98:bc:09:30:69:ad:6e:2d:
ba:dd:0a:63:88:2f:5e:85:33:95:5f:7f:73:d7:ba:ab:00:48:
eb:64:99:55:8d:03:d6:c1:be:49:60:bc:26:04:ec:17:93:a3:
45:05:0b:c6:fe:9b:4c:cf:a1:52:c7:26:d9:ce:c4:89:35:c8:
ba:01:b3:87:df:16:1f:19:20:26:20:0d:73:d8:7e:60:01:b1:
92:04:a3:62:dc:03:63:26:4e:b8:8a:8a:28:cc:e2:58:a4:03:
3d:40:6c:41:c3:99:7d:8c:35:19:8a:ee:74:84:0f:3a:74:0f:
98:db:b4:99:f3:96:00:11:80:bf:95:f3:c5:af:07:db:98:c5:
62:bd:90:8f:0e:ed:49:3e:a6:c9:c5:36:59:4c:f2:68:70:37:
23:56:c5:cb:cc:b8:15:12:9e:c5:f7:d5:d6:22:06:97:21:84:
a0:66:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:33 2025 by rpki-client