Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: d1uogJ6BUm8a8ZumVan69YylPcmCpyNdgGi7KgZmn3g=
Subject key identifier: AA:84:97:31:3E:54:8D:A1:62:D9:6E:AE:D7:84:D8:73:CA:89:F6:7B
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019873E38834EB0154B8664EA23A4CE0D95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: SRqc9ulQcYYGiBsuvkF83CAFZIYhGZoxPk2QK2hCxzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:88:34:eb:01:54:b8:66:4e:a2:3a:4c:e0:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=aa8497313e548da162d96eaed784d873ca89f67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:54:d6:e1:a5:6d:d1:a0:cc:2b:09:64:4d:
32:10:f4:87:5c:c1:7d:cc:be:05:0b:47:1d:ab:03:
df:f5:f1:bf:96:86:86:0e:ac:26:71:59:a9:26:25:
a0:89:b5:6a:af:87:5c:b9:27:eb:af:89:96:f3:06:
46:30:ca:ea:6b:9a:74:81:75:a4:bc:c9:79:49:e8:
d2:04:1f:d1:c5:d3:36:a4:28:1b:82:2d:25:ba:14:
ef:0b:d3:b8:24:e7:28:52:9c:d3:93:ee:4c:39:e4:
c9:69:ff:2c:84:3c:1e:4b:1d:73:26:80:33:e9:5e:
1c:08:c4:ca:ba:b6:27:fe:98:70:34:2b:09:b7:59:
c7:36:90:2b:f4:50:8c:b0:b5:d0:ea:58:ed:74:1e:
58:fc:96:6d:3c:90:c4:ba:f4:aa:6e:3e:7d:51:4a:
42:ba:8f:16:30:1b:4d:b6:c2:97:1f:24:b1:3b:b7:
08:0a:dd:25:70:d0:c8:f4:21:55:3c:fe:f9:f9:cd:
b0:0f:99:11:f5:ca:98:70:6f:84:f0:c8:f9:26:ac:
5d:52:ad:51:70:b1:e8:09:50:25:46:27:a2:bd:02:
f0:d5:ae:91:bd:62:01:59:71:0b:18:f6:80:a9:d5:
a0:b2:25:9c:f3:69:9d:30:19:70:0b:29:67:ae:e8:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:97:31:3E:54:8D:A1:62:D9:6E:AE:D7:84:D8:73:CA:89:F6:7B
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:1a:37:b9:f1:b5:c2:b9:d6:71:ea:73:85:6a:6a:6b:1e:
1a:f7:3a:50:40:e2:62:b2:88:7c:eb:dd:60:d0:93:32:20:88:
ff:b3:71:89:6e:c6:98:ec:b2:32:e5:60:e9:34:c5:8a:ea:a1:
3b:12:5f:6b:c0:b3:53:83:79:a5:c2:7c:23:d3:2c:76:8e:fe:
35:29:5d:ee:03:6f:9b:c4:fa:d0:05:c0:d8:90:22:ec:f3:fe:
53:13:fd:01:f2:20:f0:c2:ca:a6:75:be:eb:c2:70:b6:17:a3:
2c:5b:30:a6:e4:84:4f:d0:07:15:26:a0:0e:29:f2:c4:d7:37:
8c:19:23:58:21:8c:42:c1:2c:9c:92:cb:dd:3c:b2:b9:e0:7f:
8a:82:1f:51:68:fa:10:ff:ad:49:4d:f4:75:42:f7:dd:f9:f0:
fa:44:88:69:e8:f8:78:6d:ea:88:7f:c7:57:e2:d4:e2:13:fb:
3f:31:28:af:61:70:3a:86:3d:ec:76:27:1f:b6:af:77:db:0c:
43:e3:d5:15:b7:b1:c1:99:27:27:e5:9a:0c:9a:5e:a8:9f:f0:
cd:2f:de:1c:c1:42:a8:d0:94:48:60:d7:b7:3a:9d:83:2e:f7:
96:07:c5:2c:08:a5:09:40:ed:e5:2a:b7:10:e6:3a:d6:5d:db:
b1:3c:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:14 2025 by rpki-client