
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: Yeun/qeHyMlHvj5lWW4omNKODbSICw8cKi3Y1BYzRpg=
Subject key identifier: A4:7B:BB:11:F2:82:EB:EE:79:FB:68:8A:4C:AC:18:75:1C:61:0B:D1
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 01987ED3FE720E7F42942DA5E8A67DF87DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 10:01:19 +0000
Manifest this update: Wed 06 Aug 2025 10:01:19 +0000
Manifest next update: Thu 07 Aug 2025 10:01:19 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: EYsW7hft44cR6nuQ6oApfyrXKqyfgJFTy1b/gB3Vnc8=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:fe:72:0e:7f:42:94:2d:a5:e8:a6:7d:f8:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Aug 6 10:01:19 2025 GMT
Not After : Aug 7 10:01:19 2025 GMT
Subject: CN=a47bbb11f282ebee79fb688a4cac18751c610bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:6d:ef:d4:93:95:e9:04:e9:f4:e0:0d:54:
b6:4e:51:bb:49:6d:a5:2b:b7:2f:ce:ab:9f:90:1b:
8c:1c:c1:e8:7c:ef:43:55:2f:06:0c:fe:63:23:8e:
43:57:c5:c2:ed:ba:a0:86:d6:53:15:21:51:80:1e:
ba:03:a1:44:82:55:3c:f8:ed:3d:6d:6d:4d:26:66:
4f:3c:99:9e:ca:a2:68:7f:ad:ca:b6:38:31:b3:21:
14:bf:23:e2:86:bb:45:38:03:28:08:5c:a8:4e:6a:
b8:53:d9:03:4c:da:1b:e2:64:7f:52:9b:71:dc:94:
ef:17:54:7c:f6:6d:25:4f:60:94:b8:ea:de:c0:e3:
c2:ed:fd:49:6e:70:8d:21:b6:f5:67:2e:93:f6:64:
c2:ee:43:e7:44:12:e5:3e:8c:58:7b:3b:19:e0:60:
2b:76:61:12:6e:82:1a:be:54:66:11:c9:e1:7c:68:
5f:68:6e:c4:e0:57:38:17:ed:e9:68:ad:df:20:4a:
43:9c:12:36:bc:b1:a2:c8:0d:54:ac:02:65:1d:82:
24:54:eb:2d:b4:d1:d6:85:6a:33:bf:64:ed:d3:d4:
cf:a9:82:65:a4:59:a0:7d:a9:24:ff:86:0f:6f:aa:
9f:c1:6f:55:28:de:e2:5a:da:5e:a0:4f:6e:d6:c7:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:BB:11:F2:82:EB:EE:79:FB:68:8A:4C:AC:18:75:1C:61:0B:D1
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:7b:e4:de:fc:09:17:4a:6e:70:d1:fa:33:b8:27:b7:b8:
18:f3:80:84:cc:5b:2d:1a:d6:ba:3d:43:cf:8d:8a:3f:65:a4:
5c:91:25:25:b6:f0:48:8a:ad:c0:5d:23:e6:0f:39:21:2a:d8:
16:08:2d:35:89:90:d4:08:68:ab:12:d3:2a:56:51:83:47:76:
0c:00:d2:b6:3e:63:97:0d:47:df:75:f0:5d:0e:49:03:29:e1:
d0:47:63:00:49:37:5a:c9:70:56:5c:67:83:49:7e:14:30:a4:
f9:f0:47:98:f0:a4:55:5f:6d:57:2b:c2:53:cf:77:93:e3:91:
e7:52:01:ef:e9:df:f5:5d:a7:48:0c:54:cd:81:01:36:19:b9:
a4:da:f5:b8:d6:92:58:85:54:15:e0:4c:2a:17:a7:2c:a1:74:
c9:39:79:4d:24:c5:5c:e3:13:3e:5b:21:7f:df:5f:74:f9:a3:
07:fd:7e:6e:a6:85:2a:18:aa:44:1f:4a:1d:f3:d4:a2:e9:cf:
63:ad:b0:93:8a:b9:5a:e9:ba:7e:31:86:89:1d:96:2a:b5:63:
73:81:ce:3c:3a:5d:bd:c7:0f:da:14:20:f6:cf:71:95:7f:b8:
64:8d:6a:64:12:7f:6c:9f:82:ae:f9:96:2b:d1:1c:ad:f1:8c:
e1:ca:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:46 2025 by rpki-client