Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier: VVBKNzuCjDUBXaN5bazfszq2fSatmVZ+9XmHzduTDUk=
Subject key identifier: A0:72:34:DC:EA:AF:D5:F1:03:E0:ED:C1:04:13:21:26:2D:16:9C:B2
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 019890DAF9C58C763AB6807A2F8971756DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number: 12C0
Signing time: Sat 09 Aug 2025 22:02:06 +0000
Manifest this update: Sat 09 Aug 2025 22:02:06 +0000
Manifest next update: Sun 10 Aug 2025 22:02:06 +0000
Files and hashes: 1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: mgmKnRgPlyQRNZJlPHoAeynofMCpXe+uCGROSajrTRU=)
2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:f9:c5:8c:76:3a:b6:80:7a:2f:89:71:75:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Aug 9 22:02:06 2025 GMT
Not After : Aug 10 22:02:06 2025 GMT
Subject: CN=a07234dceaafd5f103e0edc1041321262d169cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:c1:65:9c:33:80:0c:e6:9b:4b:b7:06:0b:
14:26:ad:03:11:9b:cf:67:26:ab:57:5a:0c:5a:54:
01:dc:ed:b0:1b:5a:00:07:7a:11:eb:4d:5c:7d:e2:
dc:2a:b2:bf:a0:8f:2b:47:b4:e2:85:57:d0:c1:af:
f9:0c:c3:e2:65:15:6e:aa:10:b6:2b:bc:b0:e3:1e:
c0:82:5a:0c:85:94:cc:1d:91:4b:d4:20:9e:ab:c2:
fe:59:aa:e0:6f:2e:2a:dd:fa:f6:75:17:65:86:c1:
b1:1e:ce:88:fe:f6:1b:56:a3:4d:a0:e0:13:a4:c8:
16:7b:a4:40:ec:28:e5:af:ef:d6:ca:70:d3:82:b9:
9d:9d:0c:37:d4:b2:b2:4e:d7:bf:5b:72:d8:65:cd:
94:29:84:a3:b5:7a:07:0c:ac:98:d7:c9:ff:02:20:
6b:bd:f2:2d:b0:81:a0:37:59:60:7c:9b:24:87:9a:
52:79:81:13:ef:cd:03:9d:ce:0b:ea:51:24:b0:f0:
aa:d3:00:c4:91:6f:ab:1c:90:a3:4c:f9:4f:4b:09:
83:28:38:e4:3b:0e:23:00:b7:a0:cf:44:53:aa:f1:
23:12:57:ee:e4:07:59:af:93:e3:a1:5a:86:6d:b1:
ea:c2:7e:0e:31:c4:cd:00:8e:8b:c1:3e:3f:b5:ee:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:34:DC:EA:AF:D5:F1:03:E0:ED:C1:04:13:21:26:2D:16:9C:B2
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:cc:cf:44:cd:e4:6e:be:15:d6:6d:e0:95:8c:d4:74:7f:
74:88:cb:68:ea:44:fc:7b:d3:97:8e:b5:2f:79:9b:d2:56:57:
3e:f6:e1:df:5d:08:c9:0e:40:63:fa:f2:e9:4a:62:76:59:69:
61:aa:4d:59:eb:d0:a6:2c:48:25:d6:1a:f6:eb:aa:1a:6f:79:
c8:28:36:d6:2c:10:9e:3b:53:d3:c7:c9:51:f6:13:7e:71:22:
92:81:03:4a:b9:c1:cc:cf:28:6d:d7:2b:de:42:b2:4f:d0:a3:
74:66:e3:27:bb:a7:49:3c:5d:17:6f:36:da:ef:62:09:8f:10:
ea:c1:0b:70:0f:5f:66:f4:44:58:1b:62:35:06:15:c9:34:85:
90:61:c0:60:0a:0e:c7:02:3a:c3:e7:51:a5:d6:4b:d2:da:b5:
37:a2:78:5f:6d:ea:5e:de:7f:ca:f2:46:0d:c2:b3:1e:29:e3:
02:5c:03:37:e9:37:ab:e7:d1:89:da:ec:03:a4:57:9e:07:b6:
2f:6f:0e:96:b2:ed:90:e5:cb:ae:9d:6b:fc:af:e0:05:3b:c7:
1d:68:c4:ef:a2:45:44:f7:d8:4e:bb:42:df:4a:5d:97:3b:f2:
b9:17:e0:0c:94:8a:7c:22:88:52:6e:9b:9c:1d:ea:05:2a:53:
f6:60:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:13 2025 by rpki-client