Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: ccgZjkOH112t/22AcV181XVVSLDG6H0T7keEfYsmG+s=
Subject key identifier: 92:D8:72:30:52:75:0A:97:2A:98:39:8B:95:0D:55:4E:D1:FC:70:50
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 01987E65CB651D14167C03709C6FD3C87DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0437
Signing time: Wed 06 Aug 2025 08:00:56 +0000
Manifest this update: Wed 06 Aug 2025 08:00:56 +0000
Manifest next update: Thu 07 Aug 2025 08:00:56 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: OoRIaY8QlpiLz1jG7wrYBmqII8iXMuSHIIPXtNW5rO8=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:cb:65:1d:14:16:7c:03:70:9c:6f:d3:c8:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Aug 6 08:00:56 2025 GMT
Not After : Aug 7 08:00:56 2025 GMT
Subject: CN=92d8723052750a972a98398b950d554ed1fc7050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:64:0e:08:6a:0f:58:ba:06:b5:0e:30:d1:
89:6f:db:b8:9a:27:e5:29:b4:40:c0:e1:5a:0e:bd:
2c:1d:ca:bc:a5:4e:ee:1d:bc:3f:ae:d6:13:d5:29:
83:0e:67:1f:72:f0:b3:bb:04:e1:96:09:27:9b:0e:
f1:44:f0:2b:b8:b4:f2:cf:52:2a:d9:8d:ad:f5:43:
ea:50:17:7e:ea:3d:25:b3:b5:de:ee:e0:cc:08:e0:
ad:28:45:aa:35:2c:6b:2d:fc:85:0d:93:2e:17:3e:
3f:98:23:4c:bd:bd:a7:87:51:c2:a0:aa:86:c0:2a:
d4:47:b6:4a:ff:c2:f3:d4:77:f5:d3:b1:1a:e0:40:
77:2b:94:c0:15:c3:43:53:6c:e2:1e:65:52:24:6e:
e8:56:14:fe:f7:50:e4:f8:41:25:82:ad:d2:f8:66:
a8:55:ad:fe:48:d7:8c:ff:9d:37:3e:0b:a3:af:eb:
6a:a5:7b:1b:67:94:3a:ce:7d:d2:89:8a:ff:32:18:
10:48:89:72:48:a7:3f:3c:8b:82:e2:28:1f:43:46:
15:f5:ae:a5:5f:0b:b7:3b:db:64:0c:f3:85:ff:0c:
1d:af:1b:33:b9:8d:80:87:31:04:61:f6:98:14:bf:
54:31:18:33:a6:1d:11:d0:00:bf:ac:7b:ed:ec:da:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:72:30:52:75:0A:97:2A:98:39:8B:95:0D:55:4E:D1:FC:70:50
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:a5:4d:71:bd:b8:be:8c:a9:cc:b0:80:a4:df:52:d1:04:
df:fd:56:05:db:e9:d7:54:6e:fa:78:0d:10:c1:e1:63:5d:b9:
95:7c:c8:d7:76:20:3a:89:f9:9f:ef:0f:0e:5c:3d:c2:bc:2a:
d7:34:21:7f:84:26:e5:b1:4a:5a:20:a5:2d:02:59:dd:bd:9d:
35:c9:11:83:e1:b8:68:a0:7c:cd:22:3b:a9:25:1d:0b:fa:4d:
1e:73:d3:97:59:cf:0f:1c:5c:0b:fd:d6:35:fe:ec:0e:78:6e:
d3:55:98:c1:c4:2e:73:68:28:fd:ab:58:e6:9c:9c:50:d4:3d:
84:c7:4b:e6:e1:95:ad:09:fe:cf:92:bb:54:70:4e:cb:89:d5:
41:3e:72:6d:14:56:09:17:17:71:a4:0d:e3:39:b8:2c:11:f8:
c5:d3:2b:f2:cc:67:7e:f4:0b:26:84:b9:a2:4e:64:23:7d:6c:
12:7c:0b:68:ef:f1:c7:a3:47:3c:7a:de:b2:38:20:fd:8f:08:
22:13:8c:e7:33:54:02:8a:76:03:e7:ca:a8:4d:dd:b1:2f:65:
23:96:44:8e:f4:a8:bd:1d:2c:c3:da:7b:b3:1a:3c:8e:d7:b6:
13:58:de:be:59:56:88:e6:e1:f3:b9:c1:14:60:36:9c:ce:1c:
35:9c:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:02 2025 by rpki-client