Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: h+Z8Y5TNHj8YZkEVh6ibC/nrB17oYCRxmoO/jTqz5mU=
Subject key identifier: FC:48:06:5B:E5:FE:3E:E7:82:C1:35:7D:CC:B8:04:B9:E6:28:4C:F6
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019873069FF9865A2A21F26789AE6754B80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0399
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: wAqN56k9h2no1j/SaVCZ+gZ7sE3O/wBbdRRUsWyu+UQ=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9f:f9:86:5a:2a:21:f2:67:89:ae:67:54:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=fc48065be5fe3ee782c1357dccb804b9e6284cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:89:ca:77:32:17:b8:66:4b:79:18:c8:08:
8b:61:19:13:b7:0c:ad:16:a5:a5:a7:af:92:c4:f8:
72:87:cc:af:09:17:97:66:c6:da:2b:1c:2f:54:60:
c9:9a:1c:8c:80:da:77:90:02:7c:3c:11:18:7c:d7:
3d:14:1a:d8:81:98:3f:43:69:a4:7b:75:eb:d7:c6:
c1:b5:14:22:83:cf:ef:99:3b:1f:88:f2:c6:04:24:
0e:af:3a:af:af:57:6c:0e:ac:78:a3:89:0b:2b:f8:
6f:d3:41:5f:f4:e4:c5:73:76:1b:56:33:da:c5:58:
a8:39:61:8c:82:39:2f:e1:e5:3d:6d:fa:6e:88:1d:
64:07:61:18:a9:5f:eb:ae:26:34:c9:01:9b:ae:d0:
df:08:c2:39:a0:d7:dd:20:96:ab:8d:e8:ef:c1:14:
4b:f4:30:f6:b2:a1:46:9b:1d:a0:43:d0:30:87:9f:
57:f9:35:ce:aa:d1:d7:2f:16:02:c8:a2:d3:23:53:
8d:f5:60:c4:d2:80:19:4b:39:2e:6a:be:cc:b3:de:
e0:cf:a4:15:5b:b1:c1:cb:8f:82:3a:53:6c:5b:f3:
6a:54:c1:6f:b1:56:9e:27:5d:90:a3:51:c4:ec:55:
cf:f2:ca:5f:43:84:4e:71:77:a4:21:a4:22:15:79:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:06:5B:E5:FE:3E:E7:82:C1:35:7D:CC:B8:04:B9:E6:28:4C:F6
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:80:6f:f9:0b:54:fd:3d:97:cf:e7:89:25:ee:11:50:d3:
7e:cc:09:b6:16:c4:bf:7e:bd:71:f3:c3:4b:62:2d:df:a4:23:
3c:c3:19:e3:4e:da:07:92:dd:ab:b1:92:2c:03:19:dd:fc:f4:
2e:95:44:9d:4f:3f:25:fa:b5:8e:65:89:f2:62:74:1c:1e:e2:
c1:07:a3:75:26:f7:44:e4:21:de:0e:21:cf:29:50:2b:ba:c9:
48:92:c4:44:eb:17:92:d9:f9:cd:d6:eb:95:0b:57:e1:f1:74:
f8:1b:d3:9d:b2:14:bd:8a:b2:2a:b7:14:e0:53:45:86:b4:15:
49:5b:c1:fb:2f:3a:eb:85:f6:62:db:8f:d4:52:10:7d:19:29:
1d:9e:4c:cc:44:8c:9d:d1:66:14:71:f9:ce:35:0e:ef:54:1d:
d7:02:a7:e3:05:02:ec:0f:ec:bb:f9:03:02:83:90:7d:e9:a6:
fd:52:29:82:b6:6b:ed:76:81:23:28:d6:7d:0d:af:78:68:54:
46:15:26:33:a8:0f:3c:69:cd:c4:aa:dd:88:a5:74:9a:9e:f8:
f6:ab:ca:ff:8c:44:94:28:ce:d2:6d:f1:d4:f7:b3:03:fe:69:
9c:a6:6c:ef:b7:61:f2:c9:e1:09:1d:da:1a:13:41:77:ea:af:
cb:17:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:51 2025 by rpki-client