Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: hrTdFTIY+BokxLEpqb9YKnHuCNNMPCdvs2152KEBmX0=
Subject key identifier: B8:16:B9:46:86:EB:CE:E0:0D:DF:28:5E:99:64:9D:90:C6:AB:9B:9E
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 01987D1C253091E4E002F1FC52FADB66FF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 1353
Signing time: Wed 06 Aug 2025 02:00:53 +0000
Manifest this update: Wed 06 Aug 2025 02:00:53 +0000
Manifest next update: Thu 07 Aug 2025 02:00:53 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: hvytTQhDF+UY9lOX2YTT80mUY2kCWy/TzAk/gZgZKyY=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:25:30:91:e4:e0:02:f1:fc:52:fa:db:66:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Aug 6 02:00:53 2025 GMT
Not After : Aug 7 02:00:53 2025 GMT
Subject: CN=b816b94686ebcee00ddf285e99649d90c6ab9b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:83:25:3e:48:7a:5a:14:fe:cf:b1:f4:75:
7a:ec:71:a1:85:ab:3c:ea:a3:e1:27:e8:9b:87:b5:
35:4b:87:92:c9:12:53:7b:0c:a7:51:60:e1:53:53:
79:3c:d3:de:be:2b:53:64:6b:b3:92:4a:ae:ac:64:
47:60:5d:d9:d2:09:89:9c:c8:27:06:01:03:ff:c3:
5f:3b:1c:ca:15:71:97:09:87:e3:ef:6f:a2:c3:76:
72:fe:d5:fd:4c:2f:e9:7f:8a:72:11:ef:51:f2:cb:
70:d4:af:3f:f1:c6:81:29:23:14:ae:00:5d:28:5d:
bf:e3:b1:5d:f6:f8:f8:6f:82:25:7f:d8:f7:75:4d:
d8:ef:52:7a:86:82:84:e4:e2:f9:ee:a8:61:d1:d0:
80:60:7f:42:2a:39:c9:7b:70:e2:b0:c1:79:d6:22:
1c:b2:27:fd:eb:03:5d:af:98:74:fa:59:74:f8:30:
9c:eb:ca:f6:fd:f2:dc:44:75:6a:6d:84:60:79:7a:
18:c9:38:55:36:20:ff:b4:ce:66:a4:4e:1b:e3:6e:
ac:b7:81:69:75:a0:12:1f:f7:e0:5f:4f:9d:cc:75:
16:a1:e8:47:56:55:8b:25:6d:57:3d:7f:6e:fc:1f:
4f:84:c3:09:c6:21:83:1a:45:1c:83:6a:60:3b:e8:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:B9:46:86:EB:CE:E0:0D:DF:28:5E:99:64:9D:90:C6:AB:9B:9E
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4a:1e:60:95:bc:70:b5:87:ac:19:83:e0:68:b8:5d:1d:25:
d9:96:ea:ab:0f:3b:40:89:a4:b7:e6:bc:5a:12:27:d9:a7:ca:
66:b0:fe:dc:8b:07:aa:59:4b:68:b9:3e:75:1b:8b:ce:3f:ac:
a1:74:fa:46:d9:38:5e:f3:a4:b8:cf:5c:45:99:67:5a:be:6d:
67:5f:67:b9:48:8a:f7:d6:7b:8f:da:1c:e2:7a:2b:26:8a:98:
d6:22:af:1e:0b:ef:fa:00:5a:d6:8b:fa:f3:7a:a6:fd:33:09:
c1:ed:57:5d:a9:8c:28:f0:e8:72:ad:1b:85:3c:29:05:ca:64:
74:5f:08:4e:6d:60:b1:7c:f8:b4:ae:10:db:18:65:91:c7:28:
86:c5:1a:ba:33:a9:1a:47:75:57:01:d1:56:fa:d9:ac:fe:95:
4b:27:02:76:6e:b9:8c:fd:3c:50:c2:65:56:1d:4c:95:83:40:
b1:3f:51:20:af:6a:86:3e:21:7b:04:18:17:4e:a8:87:14:d4:
7e:04:b9:28:a3:d4:39:26:de:57:1e:df:f8:88:4c:46:10:cb:
d6:85:5c:a0:92:0c:f1:a7:c0:34:e4:17:99:a4:9f:14:27:68:
77:36:d6:42:6e:7e:df:03:7a:69:2a:7e:53:af:0c:7c:36:60:
90:20:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:36 2025 by rpki-client