Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: cdON+8KzgJdHbHPbF1Wo8TvNyzGSRpRXr4H2QKXH5i8=
Subject key identifier: D5:46:96:34:AD:FC:B1:7F:EC:82:95:29:3A:BB:3A:7C:A4:CF:A7:22
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 019A4E18E0730F179292844D23A7874DD223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 0355
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: cbmktblX4h3HihKwCUF15DdqHBvclTYa8TJi7DXNL4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e0:73:0f:17:92:92:84:4d:23:a7:87:4d:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=d5469634adfcb17fec8295293abb3a7ca4cfa722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:fa:25:20:34:f7:24:41:6a:4f:66:f3:06:
94:e6:f0:be:b7:43:48:12:f4:0c:df:6a:07:95:03:
f8:ef:e5:c6:8d:0f:39:99:0e:12:91:87:2c:a0:80:
2e:59:91:ba:c2:a8:79:04:c8:12:af:34:48:76:4c:
f5:42:9a:d5:1e:9a:bc:ff:e7:88:b7:40:7a:9b:06:
ca:af:c0:c5:b5:2d:ad:f8:51:93:79:50:27:a8:3e:
89:ed:4a:54:69:28:f8:c8:29:97:b0:03:a8:84:9e:
5d:1b:63:09:70:04:94:f8:6b:f2:41:a8:cd:d0:7b:
64:42:1c:a0:76:91:30:16:2a:c3:a0:0a:94:69:d8:
74:61:36:79:52:ec:fe:dd:bc:1d:36:45:f6:86:6b:
32:b3:90:94:4c:51:34:59:ae:3c:bc:7c:4f:e8:5e:
bf:bb:43:59:01:03:4f:7e:22:bf:0a:12:2b:34:0d:
16:91:a7:c5:f3:dc:05:ea:21:6b:37:9b:26:ca:b2:
5e:7e:ac:27:76:bf:89:12:66:c7:51:83:63:93:36:
59:3b:76:ca:7e:80:6d:b4:4c:5f:0d:e6:33:78:15:
c8:7a:84:5b:48:c1:c3:32:0f:cc:a9:79:61:14:b5:
dd:cf:bb:d5:fe:5a:5e:82:ad:cd:8c:37:b8:20:a4:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:96:34:AD:FC:B1:7F:EC:82:95:29:3A:BB:3A:7C:A4:CF:A7:22
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:b9:9a:1a:0c:6f:79:9e:e4:98:40:e7:ec:90:45:d6:9f:
05:2a:8f:6a:de:a5:15:81:18:d5:f7:dc:70:57:2c:14:88:f8:
5c:d6:57:bc:0c:f3:dc:dd:ed:3f:9e:42:65:ec:f5:44:b0:77:
1f:88:46:2f:2b:fd:9a:87:a1:68:11:c7:7d:b6:79:d8:8d:93:
83:71:7e:bd:b4:9f:ef:43:38:7e:90:5f:59:ff:b6:fc:c5:61:
2c:18:be:7c:d3:c0:f7:3a:a3:31:4a:0e:c5:6a:72:d8:01:a3:
53:d7:cd:f1:82:9a:d6:ac:43:35:16:9a:8c:02:ef:66:6d:53:
77:86:16:34:17:3f:85:93:3c:8f:ee:38:7c:fd:0f:57:5a:21:
4b:a1:ad:75:32:50:53:b4:29:f9:7e:27:4b:86:57:f5:89:12:
8e:87:f2:a5:10:80:6c:e4:0c:79:10:ce:21:8c:05:96:b5:2b:
ea:18:07:0d:f2:25:fe:12:06:ab:a2:b9:a0:4a:ee:df:89:74:
71:ea:11:99:c5:ab:b2:fe:59:58:5c:10:3c:9c:7c:78:1d:7f:
f2:5c:62:ef:3c:72:b0:4c:54:d9:c0:12:5d:2c:23:99:78:98:
00:77:9d:08:6a:3a:ae:06:a6:63:b3:54:5f:80:70:f9:e6:94:
28:54:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:08 2025 by rpki-client