Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: mhmNJm+l9PVxYdLONfiBUStUxXbGmlwh+IpgCFRLULI=
Subject key identifier: D4:10:E4:9E:A6:67:1E:27:2A:92:C1:CF:CE:35:0B:EC:88:D0:D6:78
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 0198499C7A79EE7C4873C924A1C38D7E5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 08BC
Signing time: Sun 27 Jul 2025 02:00:48 +0000
Manifest this update: Sun 27 Jul 2025 02:00:48 +0000
Manifest next update: Mon 28 Jul 2025 02:00:48 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: z60LjbtlRBMzBe/NJh9GoBKF1210E5hNBEg4UO35biw=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:7a:79:ee:7c:48:73:c9:24:a1:c3:8d:7e:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Jul 27 02:00:48 2025 GMT
Not After : Jul 28 02:00:48 2025 GMT
Subject: CN=d410e49ea6671e272a92c1cfce350bec88d0d678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:2e:26:77:df:9b:c0:ef:9c:ac:39:ee:05:
6e:8c:de:3a:16:35:c6:f9:59:73:5a:a1:13:5b:67:
1e:85:60:fe:ff:e0:2d:e4:c5:f1:0b:b6:38:7e:52:
e3:ec:fb:9a:6c:8c:de:99:80:03:cc:c4:fc:a6:19:
76:81:cd:2c:14:32:0f:33:6e:5d:de:d9:ef:37:00:
ed:b3:01:54:1c:8a:b0:46:27:04:77:48:b6:b6:a8:
5f:d8:32:98:0a:f7:2e:4a:81:ce:bf:d1:d3:0e:99:
f9:92:00:df:71:ba:89:57:1f:eb:ba:bd:f4:4f:d1:
ed:8f:5c:d9:16:c0:a1:15:b6:35:03:28:f1:95:d8:
09:c8:75:6a:88:b9:f1:3e:f5:5b:ec:ec:3c:ce:cc:
49:e3:d8:df:8f:64:9a:0e:bd:3b:40:c6:30:24:ae:
12:16:f9:5a:f7:ab:7b:1a:47:3d:8f:d6:83:80:9e:
15:4f:e8:7a:ec:ff:4d:6c:d4:40:f2:67:8c:a4:50:
d4:7d:8b:c2:8b:61:9b:34:4b:6c:1d:38:01:a5:b8:
11:4d:4d:d2:9b:1c:f7:02:a6:8e:7d:d1:45:60:7c:
34:6b:d1:1b:22:4b:46:10:8d:a4:a2:aa:0e:e2:93:
e4:a0:df:af:d3:72:dc:24:a1:c5:5f:f8:ae:43:51:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:E4:9E:A6:67:1E:27:2A:92:C1:CF:CE:35:0B:EC:88:D0:D6:78
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:66:d6:71:0a:7e:e8:cd:ca:60:05:44:64:5c:2a:d6:99:0b:
1a:ea:22:cd:35:08:33:45:de:0a:62:59:69:2b:ff:5e:19:ac:
0d:3e:40:06:b6:95:34:46:ea:2c:cf:d4:9c:78:d2:af:3d:4d:
a2:fa:a0:88:13:59:5f:8f:e7:86:4c:bc:c8:b4:1f:bb:90:61:
33:79:bb:3a:b4:f7:9f:72:31:43:42:f1:2c:c2:27:73:52:ee:
9c:e0:67:30:f8:30:b7:13:40:b2:1f:00:c9:e4:62:70:bf:6a:
d7:24:fe:dd:bb:98:9d:1a:02:af:8d:bd:f7:9d:88:8d:b1:59:
5c:95:e0:c2:f6:0b:96:90:5c:90:5b:0b:43:39:9f:98:d3:ae:
7f:40:bc:1f:4a:30:a1:ef:f5:15:40:c9:04:fc:42:02:1e:97:
5a:d4:9d:72:ce:44:3d:6b:f0:c7:a5:1e:55:64:07:14:3a:67:
bc:23:62:c0:b5:89:e3:b5:72:f2:de:d5:fd:5c:3b:f5:f6:a4:
c0:8c:96:b5:ed:dd:d9:df:25:9d:5b:1e:b6:c5:03:c2:8f:21:
4a:48:23:ae:7e:0a:9e:d0:29:0f:dd:ea:66:32:49:1c:60:e7:
fb:0a:58:bd:d2:d7:80:3a:93:05:c9:35:44:06:5b:25:a6:02:
c2:e7:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:34:28 2025 by rpki-client