Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: Oq71tP736SnbYk/YLAmrDGW/YuW0JFweKqVHm/ekELw=
Subject key identifier: 27:11:F4:C8:A6:2D:E0:BD:6E:9D:28:B4:E3:1F:5C:AE:D2:B3:56:90
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0198548D6746F0D538CBECEC2077BAD8ACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 160F
Signing time: Tue 29 Jul 2025 05:00:09 +0000
Manifest this update: Tue 29 Jul 2025 05:00:09 +0000
Manifest next update: Wed 30 Jul 2025 05:00:09 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: hKJW+JAajA4uCt+uXlU2ZBLGlXRSG/FJHcwA2ylLy2k=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:67:46:f0:d5:38:cb:ec:ec:20:77:ba:d8:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jul 29 05:00:09 2025 GMT
Not After : Jul 30 05:00:09 2025 GMT
Subject: CN=2711f4c8a62de0bd6e9d28b4e31f5caed2b35690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:e0:2c:c9:c2:f4:5a:d2:8d:71:6a:8c:68:
d6:1a:74:c2:a3:d4:4c:44:df:28:0d:50:8a:bb:42:
bd:06:f7:54:b6:48:e9:a6:3e:b2:51:43:fd:30:8d:
b9:fd:82:ed:45:cc:d7:25:15:d6:ba:0a:fa:8e:9e:
89:4e:a8:4c:8d:ca:74:f2:1b:ff:e8:d0:ac:36:51:
70:c1:b4:cc:00:d7:24:18:d3:18:49:a4:cb:89:d4:
e9:02:43:03:94:1e:3d:ab:b9:7b:52:57:83:1d:f0:
7c:5b:eb:83:61:bc:cb:65:7d:41:9a:2e:c1:99:ea:
37:af:3b:93:ce:30:8e:72:7e:aa:f3:bd:51:e1:54:
07:1b:de:d3:92:26:d9:6d:f3:a6:1d:8a:da:e7:64:
d5:63:84:15:08:18:e8:cf:dd:3d:3d:09:b9:54:c0:
39:a7:4a:df:8f:0a:98:d6:f4:de:eb:a5:46:7e:90:
42:b2:f3:f4:7a:1d:c8:3f:af:78:36:de:14:4f:e0:
e6:19:bd:a2:39:06:c1:c3:aa:44:12:8c:70:83:54:
68:5a:6c:42:75:5e:ba:70:11:55:2e:b3:b2:a4:e1:
4e:08:9f:e8:39:3f:79:64:51:dd:5c:7e:6d:60:01:
bb:8e:5a:1e:9b:60:4d:f4:f7:57:35:ac:d7:e8:65:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:F4:C8:A6:2D:E0:BD:6E:9D:28:B4:E3:1F:5C:AE:D2:B3:56:90
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:c1:63:9e:91:f7:d2:72:98:16:01:2b:66:11:f8:06:a6:
1c:d9:60:e0:94:77:e4:f3:ab:a7:31:83:38:96:83:c1:94:a1:
e4:e9:92:9d:9a:e3:93:0a:43:f9:e3:9a:94:fb:1c:d9:f5:e6:
20:80:22:aa:25:18:51:90:bb:28:a9:f7:c4:74:22:d5:18:35:
33:61:8b:1e:67:fb:75:0c:8d:21:66:9e:b0:e8:a7:a8:21:e1:
2f:fd:41:0d:d1:c9:05:f2:e1:0c:13:b3:03:5c:a6:e7:b0:5b:
be:2f:ab:12:cf:41:31:ad:48:48:11:36:2a:9b:0a:3d:e1:9b:
b5:ac:af:c5:40:f3:a3:22:52:01:83:44:8b:d2:88:90:12:8d:
2e:87:55:d8:b7:89:f6:f5:22:3d:10:9e:4b:8e:86:0a:87:28:
83:a5:a0:a2:04:f5:56:4d:c8:d6:ac:6a:8e:7c:24:2a:41:55:
c2:d8:7b:ff:66:ef:b9:f7:ff:cb:d0:e7:29:28:fc:aa:20:41:
c1:88:30:42:aa:6a:c9:12:a1:57:75:01:5b:c5:c9:43:2c:4d:
5f:ae:7e:fd:b1:49:81:fe:ad:06:59:3e:22:b1:86:a0:e0:6b:
c1:eb:d9:43:0d:cf:57:6a:0f:8e:cc:a2:c9:2b:d6:2b:b1:46:
02:d6:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:48:34 2025 by rpki-client