Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File: DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier: hMG35nqABjmyTS4XrGo8U6AUcPJt1NrPXWsyxvzcZSg=
Subject key identifier: 77:B1:B6:A3:C5:8D:93:7C:0F:E9:05:D9:7C:0C:80:D2:7C:37:78:71
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 01984A41A6DCFE7EDA36A3EFEA4EA09C67B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number: 0878
Signing time: Sun 27 Jul 2025 05:01:13 +0000
Manifest this update: Sun 27 Jul 2025 05:01:13 +0000
Manifest next update: Mon 28 Jul 2025 05:01:13 +0000
Files and hashes: 1: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: EoE7tGhG97c3qsmcasnpEzpiKEdQD7hrAeP5lMov06c=)
2: IAritswAhqNQe77s1GDg_ezpHck.roa (hash: ILdWDEHhnQvuxpeMgx2XCbjW7CQm2ybVgtMQih2P4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a6:dc:fe:7e:da:36:a3:ef:ea:4e:a0:9c:67:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Jul 27 05:01:13 2025 GMT
Not After : Jul 28 05:01:13 2025 GMT
Subject: CN=77b1b6a3c58d937c0fe905d97c0c80d27c377871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:f7:de:c0:4b:76:08:e1:a2:73:f0:c2:1c:
51:d2:0d:f9:b0:ab:53:c6:1a:b0:c9:d0:1e:de:ee:
71:ab:59:e8:68:f4:2e:3c:a3:6b:3e:1d:ca:ed:e9:
a4:64:19:29:b4:1c:22:38:d6:7c:5f:5d:92:89:a8:
ea:63:ba:92:95:2a:c5:cf:da:47:35:be:75:84:1a:
8d:c0:7c:9a:95:5a:d8:ce:ef:36:4a:0f:34:36:24:
05:a3:c6:68:2b:0f:ed:de:df:48:e1:89:e9:6e:49:
6b:c7:72:c6:94:a2:d5:2f:88:b2:3d:45:bb:ce:63:
ac:76:49:6e:b5:00:ab:84:7c:c3:ec:a5:ce:46:5d:
2b:52:c7:d8:cf:28:72:f3:fe:df:ec:9d:af:9f:de:
ac:69:d4:3b:10:75:d8:b3:bb:59:ea:6b:ce:11:7c:
b2:f8:91:1f:d0:00:2f:59:a9:4d:ac:41:48:10:22:
a1:ff:00:1e:42:c5:9b:f2:b5:e4:e4:81:94:81:01:
79:da:00:1a:3e:4f:8d:b0:8e:13:c7:36:5a:d8:f3:
e3:46:12:eb:6f:87:fe:b2:95:ae:95:c5:eb:78:91:
5b:13:9d:ff:b7:ed:ac:ac:58:d4:51:d7:ff:2d:aa:
ac:5a:22:e4:45:42:10:a8:ea:92:50:e5:b7:97:b0:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:B6:A3:C5:8D:93:7C:0F:E9:05:D9:7C:0C:80:D2:7C:37:78:71
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:79:a9:9f:e5:73:05:81:1a:9f:c6:28:62:83:3c:0b:57:64:
fd:df:09:a7:54:e4:15:95:a8:fd:13:11:19:01:a2:b1:a4:9d:
24:af:64:5a:a0:7e:1d:36:69:f1:7f:89:b3:cf:36:15:32:40:
ae:dc:75:82:3a:34:2d:ce:49:40:a2:c9:b5:88:ac:3f:90:36:
5d:db:f4:d0:bd:60:da:7a:6d:26:11:53:06:fe:e6:4f:9f:ef:
9e:d5:31:e7:51:77:fa:d7:52:16:23:df:47:cc:2c:eb:e8:c7:
be:2d:19:a7:70:d9:5a:8c:fa:96:c0:3e:3a:e3:78:92:fb:ae:
6c:18:6a:7c:af:ef:99:34:01:ec:3f:b2:e2:f0:32:e2:99:53:
0f:f3:21:73:17:c2:d8:71:e9:51:14:e7:1e:09:77:df:5e:f6:
ac:2d:f9:1f:95:a4:03:d7:1c:fa:c5:cf:3d:c1:5f:3c:0f:ec:
dd:c3:f2:4b:8e:37:9c:98:de:33:16:f1:db:2a:b2:01:40:7e:
a3:4f:b2:c9:b7:29:fb:79:fc:ef:46:6e:93:97:50:de:67:4b:
31:fd:96:6e:30:5e:f7:07:c7:57:f5:aa:50:6a:86:69:ce:f7:
eb:ce:29:01:ed:a6:75:d4:a1:88:91:95:66:9b:f6:c8:56:21:
e4:0a:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:34 2025 by rpki-client