Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: 6i0K8t7KMKXG3YO8GxIM7Gh9YDnXLvMBqb6ju6K6faM=
Subject key identifier: 76:19:81:50:AD:EB:5F:F0:7C:92:13:92:70:DB:62:26:0B:96:57:B7
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 01977B300B8C368D613A39DFB761D7956EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 1171
Signing time: Tue 17 Jun 2025 00:00:35 +0000
Manifest this update: Tue 17 Jun 2025 00:00:35 +0000
Manifest next update: Wed 18 Jun 2025 00:00:35 +0000
Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=)
2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: 1evTefBtlWMVOZQiHsMpMx78Y8hrAbktRpU+uhrKXCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:0b:8c:36:8d:61:3a:39:df:b7:61:d7:95:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Jun 17 00:00:35 2025 GMT
Not After : Jun 18 00:00:35 2025 GMT
Subject: CN=76198150adeb5ff07c92139270db62260b9657b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:97:ec:e2:43:09:ae:4b:78:fb:12:c4:04:
cb:e0:29:1b:57:21:d3:11:71:03:97:52:e6:17:c1:
b6:d6:98:a7:fd:a4:21:21:b2:78:5e:a4:04:b3:e1:
20:23:af:ed:45:20:b9:fd:75:6b:48:95:35:cc:f6:
34:83:89:56:c1:9a:00:94:f0:f7:ef:ec:5e:06:25:
d2:be:c8:2b:a1:96:37:66:3d:d2:61:e5:eb:08:95:
69:02:0c:a3:29:8f:93:a6:d6:cc:42:b7:70:76:0f:
e0:81:79:99:de:db:14:b5:53:73:57:21:75:36:60:
dc:bc:81:ec:a4:9c:b0:48:4d:7b:8d:fc:67:1e:d2:
2d:80:c4:e5:e5:87:09:6c:0a:5c:26:bc:4d:45:eb:
ed:78:cb:81:f6:87:8a:05:cc:a6:47:14:48:b2:23:
b2:72:3b:d1:82:27:7b:08:02:22:dd:61:74:03:c6:
ba:ba:3d:c2:02:d6:20:ad:3c:72:c9:c6:70:70:4d:
41:10:e5:37:68:63:3c:86:0b:24:e2:13:8f:83:13:
28:ec:be:16:a3:53:e0:e5:90:5c:80:71:08:3c:95:
fb:de:1f:73:85:22:27:3d:69:0b:4a:e9:49:7d:a0:
44:bc:35:ef:2c:bc:5b:d2:7d:72:68:60:a0:c1:97:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:19:81:50:AD:EB:5F:F0:7C:92:13:92:70:DB:62:26:0B:96:57:B7
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:30:8c:ec:5e:dc:75:cd:05:55:96:24:7c:0a:21:bb:66:
2d:8b:bf:69:85:12:85:ee:0f:b9:e7:23:d4:fe:93:85:72:23:
21:5a:34:52:68:c5:11:fb:f4:4a:bc:f7:cc:49:b7:e8:85:98:
45:03:00:54:94:51:46:19:ee:2f:dd:b0:3e:eb:26:fb:87:26:
3f:d0:50:5c:d9:f3:23:57:13:47:bb:19:4d:22:90:4b:27:16:
f0:c5:b5:72:1f:03:04:02:31:ce:99:3e:41:91:70:b5:8e:44:
b2:9b:bd:99:d9:f3:f3:bb:12:4e:8f:dd:7d:e1:18:07:99:b0:
11:c6:d4:ca:5c:b6:9c:af:20:c0:97:62:5b:0e:40:39:06:63:
86:94:16:b8:e7:80:e8:a7:20:79:2d:3d:ce:89:84:19:4e:ba:
a4:d4:e1:e6:f8:8d:0b:70:35:50:9f:ed:d5:a7:0b:64:e7:95:
43:15:70:94:ec:15:c3:be:13:2b:16:f5:c5:49:67:a2:0c:73:
38:64:35:ae:91:02:14:6d:8e:2c:93:69:07:dc:ad:54:8e:c5:
c2:08:c4:2f:4e:a6:62:0c:5c:05:77:00:9b:1b:d2:cf:1b:c0:
bd:65:a1:5b:c4:3d:d6:cf:00:50:15:a7:1e:3c:69:df:52:15:
6e:5a:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:38:30 2025 by rpki-client