Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: 5ecbZ7MoovzOlY07MSHWpasamwxXHgK8tVhQ5PdqSU4=
Subject key identifier: 62:3D:58:67:86:66:42:0C:1D:83:D0:89:6C:C7:8D:A5:D3:6F:F7:9E
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01987D8B5FFC20A6DF21817F9706641BC6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1441
Signing time: Wed 06 Aug 2025 04:02:22 +0000
Manifest this update: Wed 06 Aug 2025 04:02:22 +0000
Manifest next update: Thu 07 Aug 2025 04:02:22 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: nlWxSObPcOLSveMYv7tyNAIUXa62EESIckjlNgdGSpg=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:5f:fc:20:a6:df:21:81:7f:97:06:64:1b:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Aug 6 04:02:22 2025 GMT
Not After : Aug 7 04:02:22 2025 GMT
Subject: CN=623d58678666420c1d83d0896cc78da5d36ff79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:5c:1e:2b:db:fd:e8:b0:04:0e:29:19:d3:
ba:54:21:94:cc:54:9b:d5:6a:16:a2:1f:b1:06:a8:
2e:16:53:fc:a2:5e:24:9c:58:da:91:fb:35:e7:3c:
0e:f1:cc:b7:ec:17:8a:33:b9:ff:44:e1:39:8c:4a:
6f:90:06:35:18:c9:32:59:3c:d5:85:dd:76:d0:70:
ff:be:f0:61:01:a7:64:cb:39:ed:44:f4:7f:2e:b3:
d8:c9:d4:af:fb:c6:de:cd:a4:a0:05:39:1b:3e:ee:
d8:3f:40:a1:ee:39:3d:80:b8:d7:3b:19:26:00:eb:
c6:37:0a:36:07:d0:8b:09:67:11:e6:63:d3:c3:2e:
94:f8:c0:fc:65:d8:1f:97:73:ff:e2:e6:54:90:c3:
c6:15:33:7b:8a:d6:8c:8e:e7:ec:ae:78:63:4f:69:
1b:b5:70:a9:60:c4:d4:d0:05:28:e8:59:fc:7c:58:
cb:1a:f6:73:94:54:d7:2e:b8:3a:5b:ac:ef:2f:45:
d5:c3:b1:89:db:77:da:35:de:63:21:d6:93:a7:a0:
42:28:28:3b:61:38:8c:74:ca:d2:ec:02:e5:39:f1:
97:63:48:f8:d2:7e:56:4a:7a:e9:94:9a:fe:3a:bb:
97:52:5e:14:1f:e7:c7:91:ef:a4:fe:88:b9:f5:f6:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:58:67:86:66:42:0C:1D:83:D0:89:6C:C7:8D:A5:D3:6F:F7:9E
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:00:be:ec:89:c0:52:f6:9e:f2:50:ae:69:f3:4d:1f:01:c8:
90:34:3f:fe:f3:c0:20:84:79:f5:7b:83:57:23:08:d3:fa:a2:
62:7c:b0:63:45:c7:2b:6f:e5:90:4f:db:07:01:06:ff:9e:2a:
f6:19:89:bb:4f:cc:1e:35:2a:6c:fc:df:35:88:d1:09:70:3e:
2b:be:41:23:4e:e2:94:2e:0c:a6:c9:12:8f:f9:16:53:ae:78:
e0:86:ba:2d:be:b8:54:83:e9:d1:c7:fa:ec:69:73:91:f1:30:
6a:f8:2e:e1:81:1a:b2:70:66:b6:d6:2d:24:a6:a2:98:23:2a:
1c:a7:51:f7:93:45:cc:f7:25:86:91:60:82:8a:9a:91:e5:d9:
c4:5a:11:35:6d:f4:6c:b5:3d:29:13:e5:12:f7:e1:41:b3:be:
bc:da:36:76:48:2e:5d:d8:36:7f:0d:9a:1a:ae:54:5f:8d:2e:
a5:50:b0:ce:80:6a:7d:7b:02:d4:07:cf:53:da:3a:9b:d7:96:
2b:e3:f9:e5:21:5e:46:9a:d1:fc:2f:44:b3:72:6b:7f:3b:45:
7f:46:d1:12:cb:7c:ed:50:bc:5f:a6:76:49:e4:ce:61:ed:a9:
ab:cc:2a:c7:93:9f:4a:da:51:42:64:82:b9:7f:93:d5:5f:98:
8d:ed:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:41 2025 by rpki-client