Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: i24Wr8On5bo2MzNiIcbFlLif7n7JSCSAEUdd/EpSgXs=
Subject key identifier: F9:45:21:F1:51:8D:D9:90:C1:5F:67:D4:FF:79:69:9A:8A:30:D3:3A
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019892C959A1BA925FA40FC5732BB5CCF014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 1022
Signing time: Sun 10 Aug 2025 07:02:05 +0000
Manifest this update: Sun 10 Aug 2025 07:02:05 +0000
Manifest next update: Mon 11 Aug 2025 07:02:05 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: M9QrBp+TEZmwoz95jwS805q8td4v4VdYg0VyGBrJELE=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:59:a1:ba:92:5f:a4:0f:c5:73:2b:b5:cc:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Aug 10 07:02:05 2025 GMT
Not After : Aug 11 07:02:05 2025 GMT
Subject: CN=f94521f1518dd990c15f67d4ff79699a8a30d33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:24:da:d6:17:4e:53:7f:4e:0d:7d:27:1b:
57:2c:f7:ba:de:37:34:41:ce:7e:91:44:19:88:e2:
e9:c9:79:a6:be:db:dc:b4:94:b9:97:46:67:b6:a3:
7f:9f:76:2f:4a:c7:26:81:f6:7f:74:b7:da:f3:da:
b1:32:95:5b:18:53:f2:a9:ee:a5:35:ad:5e:eb:14:
ad:fe:0d:ec:2b:fe:ca:02:6a:40:66:1e:e5:1b:0d:
95:78:66:6d:92:04:cc:a8:66:5a:a2:75:b5:2c:39:
a7:68:44:74:0d:02:75:1e:9e:a7:c5:01:0e:3e:67:
ed:4c:7c:83:c8:c7:64:21:44:9b:91:9e:fb:19:6c:
85:9b:4d:0f:6d:63:63:9e:62:24:21:50:70:75:79:
ce:31:b3:e6:03:e7:84:2d:a8:38:96:45:ba:50:7f:
0b:29:e6:0d:aa:b6:3e:2b:38:67:97:b6:91:8a:b4:
a5:7a:d4:31:c3:d5:18:b3:a4:56:15:18:4b:56:ac:
7a:7d:4f:fe:f8:96:93:42:94:9e:e2:87:54:9c:06:
8a:65:ce:b6:b3:c9:a4:d5:8b:d1:3e:5e:84:e0:f0:
11:6e:fa:89:02:d1:7c:b2:f9:e6:96:2d:52:36:d8:
b4:9c:f7:84:68:bb:96:fa:cc:ba:17:fb:ed:d3:7c:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:21:F1:51:8D:D9:90:C1:5F:67:D4:FF:79:69:9A:8A:30:D3:3A
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4a:75:7b:15:ad:19:00:05:29:f5:dd:ea:0e:32:99:0e:01:
80:1e:9d:a5:5d:7e:76:51:c6:7b:f0:9f:45:87:1f:40:11:fa:
10:93:a9:c2:1c:e4:23:02:a3:a7:a5:2f:43:e3:43:ab:29:8b:
d7:0e:55:39:67:fa:a6:9d:99:52:a7:e5:ca:94:ba:ba:a9:c5:
6b:0f:6b:42:06:e6:1c:29:ec:2f:08:d4:37:10:4b:bb:8f:dd:
b9:82:13:e5:2c:f1:fb:09:32:bf:56:b2:1d:4a:23:98:46:70:
2a:b2:f6:d3:64:23:5f:cd:72:d5:19:ed:08:fb:c0:b9:96:8b:
93:37:2f:31:92:bd:85:0b:77:5e:8f:f6:46:06:de:4c:38:20:
ea:03:f1:6b:a0:58:6a:56:03:fd:26:04:93:29:db:1e:8f:55:
c9:96:bb:5c:76:1f:a7:39:1a:67:76:0f:c0:f1:b8:a4:b8:f0:
1a:13:02:3d:9c:da:42:c3:40:68:1a:66:2d:c9:06:68:e6:cd:
e2:92:0a:e1:43:23:a6:e9:ee:5a:16:4e:8e:a9:c5:c6:3d:0e:
ef:ce:fd:95:41:cd:06:b4:d8:e6:ef:a1:e5:3e:90:4a:0d:84:
30:b4:76:2b:08:9c:c0:fe:ae:26:89:21:65:3a:36:41:10:c5:
c7:c8:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:53 2025 by rpki-client