Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: ovQHCpDdxwS5oeonY85RwF/q6flsJ4KVn6jnGaO0oX0=
Subject key identifier: CB:B4:AF:63:ED:60:5F:79:E4:33:87:4D:EC:2B:FD:C1:51:1F:68:39
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 01984AAEAE2E19920F3097B351FB048B7BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:18 +0000
Manifest this update: Sun 27 Jul 2025 07:00:18 +0000
Manifest next update: Mon 28 Jul 2025 07:00:18 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: ikVRmki2gnPzDcI7Z/IB5PqyEu021W0ZXF5AN/PNHZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ae:2e:19:92:0f:30:97:b3:51:fb:04:8b:7b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jul 27 07:00:18 2025 GMT
Not After : Jul 28 07:00:18 2025 GMT
Subject: CN=cbb4af63ed605f79e433874dec2bfdc1511f6839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:83:f6:b3:11:de:e0:5e:ad:24:11:b8:86:
1a:dc:d9:d2:58:1a:a2:ba:ee:43:e7:7c:67:bd:0b:
48:81:a6:ee:ec:de:78:73:50:7c:fc:68:0e:ff:6a:
24:7d:fe:7d:f1:bf:a5:2b:fe:a5:1d:77:11:44:14:
e3:e8:0c:60:37:78:de:cb:2e:c2:65:bc:d4:ca:a2:
db:4b:38:c7:d9:50:62:af:33:dc:0a:76:8a:f8:bc:
29:8d:80:4c:25:d4:47:be:cf:6b:cf:43:83:e6:7f:
f6:cd:99:22:61:58:89:42:ba:7c:c9:9b:3c:4a:b2:
be:ed:ff:b9:1f:96:9d:59:5e:08:b2:3f:d6:d1:ac:
dc:cc:a8:d9:5b:7e:a8:cb:d8:25:7f:00:2e:14:2d:
21:b3:3d:ce:8e:33:61:19:98:5d:aa:be:25:36:35:
99:47:a0:ef:70:63:de:1d:a6:cd:f5:b5:7b:4f:fa:
5a:f5:1e:a1:ee:12:34:3d:ee:8a:54:a1:e0:bb:6d:
78:3d:25:84:34:99:e7:e8:50:ad:3e:0a:33:76:5e:
0e:0e:ce:3c:a5:fa:29:76:94:8a:9c:8b:14:82:1e:
ec:5b:a3:e8:7e:2f:02:ce:40:e2:ef:70:1b:6e:1b:
24:be:83:67:b8:70:d7:98:85:cb:e7:8d:90:0f:a0:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:AF:63:ED:60:5F:79:E4:33:87:4D:EC:2B:FD:C1:51:1F:68:39
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:bc:e8:07:b0:9e:94:6f:e7:ce:5e:cb:b8:f0:c6:1c:84:
ff:a7:48:b9:8c:c0:b3:28:0d:0e:61:22:1d:63:93:03:32:f2:
23:0e:d8:01:dd:d6:c7:a1:73:8c:7c:48:c7:0c:58:9d:4b:da:
c5:ca:c8:06:46:d5:b0:c7:d3:dd:e8:ca:00:dd:3f:b0:5d:37:
55:d9:bb:56:dd:39:b2:e8:2d:f9:63:85:d4:41:b8:63:ae:d6:
18:9f:96:59:6d:a6:ff:85:8d:da:51:0b:b3:74:07:ba:67:37:
61:00:9d:ac:1e:7c:2a:99:bb:f6:5a:3f:45:f3:1e:66:80:00:
69:fa:a5:d7:98:f6:5b:3a:cf:da:ed:cb:18:78:b1:c2:e3:f3:
eb:af:8a:e6:26:80:f4:55:ec:f1:53:c6:7d:0f:3a:0f:b7:05:
4a:0b:bf:0e:07:3f:17:0f:75:b8:12:c4:b6:73:58:ad:83:ee:
98:3b:01:db:75:f4:db:a6:14:db:25:2d:14:83:cd:a1:11:7a:
d2:6f:4f:c9:a7:85:3e:55:02:59:8f:51:3f:a7:69:43:72:a0:
f6:45:d0:04:9a:8d:cb:31:14:ef:b1:53:86:88:03:e5:e2:6e:
c3:ab:3a:37:74:9b:01:76:72:66:3a:dc:86:af:18:ed:aa:14:
03:ad:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:29 2025 by rpki-client