Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: iINvnKnHNvMcNyAv3KUk390N0Szy4T+WH8/xHxxX1VQ=
Subject key identifier: C2:DB:A7:AC:B6:6D:C2:18:53:F3:52:B1:70:91:9D:6C:E9:45:7D:EA
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 0198469AE74B2017D2F372F7B2DBCEAA6B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 12:00:13 +0000
Manifest this update: Sat 26 Jul 2025 12:00:13 +0000
Manifest next update: Sun 27 Jul 2025 12:00:13 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: a4Qq536Cts0+/zGjCHeSnA+16uhH7la51hIzUa78s8Y=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:e7:4b:20:17:d2:f3:72:f7:b2:db:ce:aa:6b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jul 26 12:00:13 2025 GMT
Not After : Jul 27 12:00:13 2025 GMT
Subject: CN=c2dba7acb66dc21853f352b170919d6ce9457dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:8f:9b:98:ed:48:6a:20:3a:c2:5b:f7:8c:
5e:df:e0:25:64:c8:f5:f5:d6:2f:fd:8c:7a:38:46:
eb:91:76:39:a1:bc:f3:cf:4a:6c:a0:97:96:1d:21:
1d:8a:1c:51:7e:d4:a7:0a:ce:d1:91:3c:5b:da:6e:
df:59:01:35:fd:b6:2b:9a:41:e6:00:f7:3a:c3:0a:
35:16:07:c5:cb:16:d3:0d:f7:63:59:d8:be:7a:fe:
1a:4c:c7:19:df:85:e6:8d:c6:d6:78:ab:ff:24:07:
15:33:af:d9:60:4d:91:00:c5:bb:57:a4:ec:67:09:
d9:4f:07:e7:74:3b:d3:42:cf:e8:6e:19:c0:69:7d:
c5:e3:bc:19:ba:32:e8:e9:17:68:2a:1f:e6:49:97:
b6:38:0d:aa:52:8d:dc:4c:3d:d3:ff:d5:da:85:b1:
2e:b1:79:bc:1e:1a:84:73:d7:0d:96:79:c4:e2:ed:
8e:eb:42:97:54:e8:df:81:6a:7d:f1:05:36:e7:a9:
33:17:4f:a6:8b:7c:54:3b:9d:00:02:c3:41:4d:9b:
44:c4:75:1f:6a:84:28:7c:a9:e2:dd:f8:b3:2a:5c:
94:37:80:d1:fc:4c:64:74:f8:af:28:b3:83:32:49:
75:45:bb:08:93:46:54:3c:5b:1d:32:2c:0c:36:c3:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DB:A7:AC:B6:6D:C2:18:53:F3:52:B1:70:91:9D:6C:E9:45:7D:EA
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:0b:15:49:ad:49:30:8c:bc:5c:e5:24:41:53:45:be:68:
25:8b:cd:62:95:3d:3c:81:62:0d:59:e6:05:b8:74:73:cd:bb:
68:22:b4:c5:f2:9f:f1:f2:a2:eb:a0:47:e6:da:3f:89:9e:47:
bf:94:66:86:da:65:15:fc:ef:81:a3:a4:ff:8c:da:1d:66:80:
69:8c:a9:ab:fd:22:c9:a4:60:0d:a8:5d:b5:03:70:8e:9f:37:
32:e0:f8:bb:e6:0b:99:e5:0a:40:06:98:6f:d7:56:ec:e0:c0:
24:fc:cc:73:3d:81:6f:6b:ad:06:3a:ff:cc:93:fa:67:80:bf:
04:fd:34:27:6a:14:f0:ea:68:59:93:29:e7:ed:21:e1:e4:51:
6e:34:49:59:73:42:17:70:d0:3f:ec:a3:70:37:ee:8b:8c:fa:
51:f9:26:b7:c2:e6:53:6f:92:8a:dc:14:23:44:65:db:b2:5f:
ab:ab:c5:cd:69:4c:b1:e6:09:64:a7:bd:48:f4:33:67:6e:6c:
a7:0e:fb:ec:a8:e0:9e:68:09:03:5e:bc:6a:75:52:9e:c9:8b:
35:1f:3b:a9:af:16:d5:b9:ae:7e:43:b3:a7:81:4b:c8:a6:35:
55:61:1b:c2:ce:8e:d3:9a:a3:e7:71:46:86:b3:36:0b:7d:81:
d1:2a:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:08 2025 by rpki-client