Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: e/F22uE22qboAms0I+gWV+4tSqAenUCu/diwtuyD3fs=
Subject key identifier: 80:29:5B:A3:E3:27:2F:CD:36:02:56:60:0C:EA:8F:DF:6E:4F:91:02
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 01988543F20929001173A7A65F2DD545BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 16:01:19 +0000
Manifest this update: Thu 07 Aug 2025 16:01:19 +0000
Manifest next update: Fri 08 Aug 2025 16:01:19 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 2Qv1iMUe62ZhiJVO6xRTG/SNe2rCiW9pC+/MDUPNPbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:f2:09:29:00:11:73:a7:a6:5f:2d:d5:45:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Aug 7 16:01:19 2025 GMT
Not After : Aug 8 16:01:19 2025 GMT
Subject: CN=80295ba3e3272fcd360256600cea8fdf6e4f9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:2a:5b:8d:c3:43:10:22:a4:d0:4f:ac:13:
0c:db:b7:13:d2:ed:2b:10:91:11:f1:f8:63:1a:c7:
9c:37:5e:8d:ff:07:38:b4:c1:28:5e:f4:6a:32:82:
c6:22:ca:24:e9:c7:b8:80:c3:dd:c1:28:12:92:1a:
a5:a3:db:a7:76:59:67:23:65:39:2a:dd:d9:cc:1c:
b6:c8:d0:56:ba:a3:0f:a7:8f:b7:58:f4:1c:1e:2f:
22:b9:6e:e0:19:03:00:7d:27:2c:d7:6e:38:db:86:
a2:67:d5:d5:54:64:04:57:75:cc:81:21:5d:b2:f0:
bc:a1:61:2c:b2:7b:1d:f4:ee:d7:61:2a:d5:77:c1:
c4:9d:ea:0b:b4:91:ee:b8:29:7e:36:bd:12:af:cc:
7b:1e:29:2c:43:73:df:b6:8f:42:cb:69:25:18:7d:
8a:75:7c:b6:37:75:f6:12:d0:de:33:bc:47:c3:34:
c8:c2:90:42:a7:b2:7b:58:bf:aa:67:2c:68:fb:14:
27:48:4f:67:05:ef:53:4f:89:7f:71:f8:e0:fd:05:
69:18:0b:44:6e:cf:f1:76:0e:ec:fe:40:9d:fd:dd:
26:04:8c:c5:36:4d:bb:26:7e:e1:cc:25:86:39:be:
3f:c3:b9:76:6a:32:cd:ac:e3:d3:ef:15:3e:12:9a:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:29:5B:A3:E3:27:2F:CD:36:02:56:60:0C:EA:8F:DF:6E:4F:91:02
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:68:13:4a:90:86:c2:60:03:93:3d:8a:7d:37:5f:50:f5:bc:
36:ca:4b:94:4a:ef:1a:ca:8a:21:45:5f:26:5f:38:bb:9d:ab:
0b:2a:f7:01:ff:37:cc:04:7f:d9:0d:96:c3:bf:dd:c4:84:0a:
68:b1:2a:b6:c4:bd:de:16:11:28:60:6e:a8:10:44:96:79:cd:
74:82:57:d4:f9:40:b7:31:79:d1:ec:43:bc:74:52:bd:c4:72:
ef:81:6e:41:b0:44:17:a9:4c:12:5c:f3:fa:e9:90:43:e8:3c:
2e:cc:2f:20:56:20:06:a4:d4:0c:ba:62:5e:53:59:1a:29:0a:
0f:e8:ff:03:8e:d9:da:fd:47:12:96:3d:55:99:2e:55:2f:89:
88:ea:b8:48:ee:b4:9b:1f:d4:dc:3b:e1:08:f9:c4:99:88:5a:
68:4c:a5:d6:7a:33:1c:6b:b0:39:21:3d:4a:c7:9b:65:1d:40:
45:8e:78:1f:ca:23:01:c9:87:eb:40:45:7a:88:a2:57:ec:4f:
ca:8b:58:50:e9:ed:7a:81:77:dd:86:ee:5c:27:4c:bb:f3:66:
c6:a0:5c:75:77:8e:83:15:76:a6:65:5c:6c:3a:78:75:92:0a:
ca:13:e8:84:09:a9:0d:76:9a:eb:8c:ab:12:0f:b9:ae:c3:b7:
ed:37:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:12 2025 by rpki-client