Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: bwvgUknEVpOBgf+aUu+Atan0zUS9Ch+vncEZVEBYds4=
Subject key identifier: 8B:44:5A:97:F8:26:F0:19:A2:83:81:DE:8C:66:B0:0C:D3:ED:1D:0D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01984852AB77D917087D6B6339B6C36DFA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0FA6
Signing time: Sat 26 Jul 2025 20:00:34 +0000
Manifest this update: Sat 26 Jul 2025 20:00:34 +0000
Manifest next update: Sun 27 Jul 2025 20:00:34 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: AZw1pkm86viJ7e4XUnLbpc0fDxPu6WOSWHshE9C/ZD4=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ab:77:d9:17:08:7d:6b:63:39:b6:c3:6d:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jul 26 20:00:34 2025 GMT
Not After : Jul 27 20:00:34 2025 GMT
Subject: CN=8b445a97f826f019a28381de8c66b00cd3ed1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:65:01:c6:ad:59:73:fa:82:7c:0a:6c:c7:
01:85:14:a5:d5:4c:7e:3f:a8:35:b7:b9:4d:e1:7f:
e9:3f:c4:ff:7d:df:5a:63:d4:56:3a:f2:3d:16:3b:
8e:2c:c3:d9:08:00:fa:c1:b8:04:15:86:21:bf:f3:
63:b9:f1:fe:e2:10:6c:45:27:5a:7d:15:b8:96:65:
98:d6:56:2b:6b:89:78:e5:b3:96:91:4d:4d:94:64:
2d:6f:ac:66:56:9c:c1:57:f5:02:92:56:04:53:0e:
63:cd:31:35:ce:06:89:63:87:a6:a0:62:cd:11:cb:
fa:ac:e6:4b:fd:e5:0e:48:2a:a5:4e:05:35:6a:17:
11:15:03:75:58:be:a2:10:bf:42:b7:a4:62:12:b8:
1b:b4:98:5d:70:70:a5:25:88:1a:6e:81:e4:14:a7:
28:f1:6a:48:01:c3:bd:b6:4a:f3:e2:3c:85:d3:08:
e0:76:4b:64:83:64:39:5c:a5:f5:eb:0a:06:7d:e8:
94:f9:f1:84:cd:d2:59:b8:e8:5d:0e:8e:76:1f:c8:
33:0e:a2:d9:ea:1e:78:b7:64:63:93:67:0d:cb:9b:
d5:1d:72:0b:82:7e:6a:78:cb:8e:6c:85:2b:f4:0e:
cd:64:3a:29:36:96:f7:d5:44:82:ac:03:20:1c:f6:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:5A:97:F8:26:F0:19:A2:83:81:DE:8C:66:B0:0C:D3:ED:1D:0D
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:66:eb:75:7f:42:3e:03:60:60:8d:7a:b7:d6:37:1e:a1:
d5:52:56:62:87:f1:f8:cc:90:25:03:b9:df:ef:f2:e8:4b:a8:
71:36:43:19:d6:fe:5a:b4:74:a2:a0:70:71:61:72:7b:e9:d6:
05:ea:3b:e6:f3:08:ad:0f:a9:53:44:50:cb:70:e1:48:74:c3:
bf:6e:75:59:b1:82:d2:a5:6a:4b:61:33:f2:b8:70:37:5e:4e:
fb:28:49:a0:bf:fe:18:05:9e:9d:73:6b:13:05:fd:28:16:7c:
9c:48:07:78:35:1f:a0:79:d4:a8:a3:43:45:d7:f9:74:af:68:
aa:87:33:3f:9c:c5:b8:8f:da:bf:b4:c1:1c:73:9b:42:8e:0d:
b0:ae:e7:47:97:23:31:12:e1:51:a0:99:20:c2:dd:47:93:60:
01:ea:7c:18:98:3d:56:a0:4d:f6:23:69:8f:f3:cb:fe:70:45:
8c:99:f4:d4:fb:30:c5:47:c0:fe:6f:b8:cb:f8:27:33:8f:02:
4e:c8:f0:88:fb:09:a4:79:7b:67:bb:1f:0f:1b:85:04:fb:cf:
24:55:c8:da:d9:a2:20:74:40:ba:20:8a:a8:08:0c:57:c9:79:
a5:6d:e5:f1:98:1e:c9:36:eb:ce:7f:d0:18:8b:2c:0e:02:f9:
09:a6:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:02 2025 by rpki-client