Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: fMz8wfcxfd4lPe830xvktR+BLCzhZ0kXgOxh7hhe1vA=
Subject key identifier: B7:F6:02:A6:87:E2:74:55:80:E0:7F:7C:FA:5F:43:A8:12:F7:40:14
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01983FBDC38DD21FC028696D4DB7CE6FC0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 04:00:57 +0000
Manifest this update: Fri 25 Jul 2025 04:00:57 +0000
Manifest next update: Sat 26 Jul 2025 04:00:57 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: JA4rInmwMixhIUpQziv8vJf3vCczi+f7jFfIJlOGi6M=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:c3:8d:d2:1f:c0:28:69:6d:4d:b7:ce:6f:c0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jul 25 04:00:57 2025 GMT
Not After : Jul 26 04:00:57 2025 GMT
Subject: CN=b7f602a687e2745580e07f7cfa5f43a812f74014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:80:c9:9d:c2:97:7e:9d:50:35:fd:22:73:
06:39:a0:42:ef:c0:8f:66:82:07:5d:53:e2:95:66:
1f:62:a8:e0:43:6d:88:19:71:05:88:70:13:b1:cd:
c5:9d:60:19:86:33:01:03:a8:7c:64:bc:30:c9:85:
0e:5b:2d:93:89:5c:3a:66:cf:1a:29:28:1e:d4:49:
5c:3e:4c:be:7a:ff:fa:4c:1f:de:66:3b:a4:8b:b5:
ea:83:ec:43:63:8f:fa:c1:af:c5:e7:e4:81:ad:5f:
a9:0d:e5:bc:1a:dd:16:10:54:c8:03:a6:ed:08:8b:
e0:14:6b:a2:a9:00:6d:83:b5:26:fa:ee:45:0d:aa:
a1:74:18:1e:03:6b:3a:2b:de:8f:b0:93:a6:b0:ce:
00:2d:13:51:72:5c:49:e7:4f:79:0c:41:1a:a7:2c:
bb:d2:28:b8:6c:59:8a:32:a3:a7:83:26:bb:9f:64:
e7:93:22:72:1c:1d:d3:6f:ca:bf:4f:eb:c5:a6:15:
90:92:d4:bd:f0:70:ab:9d:46:d2:fd:ba:e8:0b:ad:
80:3f:c4:0d:86:f0:97:da:49:f9:57:23:9d:c1:3b:
24:61:b8:40:2c:84:4f:4c:34:5c:f6:f5:76:f5:f5:
08:cd:2e:62:e4:8d:58:93:26:93:51:dd:9a:a1:63:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:02:A6:87:E2:74:55:80:E0:7F:7C:FA:5F:43:A8:12:F7:40:14
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:15:39:63:c8:a5:fd:a4:a1:e6:62:3e:b5:ed:05:f3:41:
1b:6a:a3:2b:57:e5:1c:50:1f:2e:1b:39:32:bf:5b:6a:8d:92:
7a:05:a0:fd:6d:17:2b:10:c7:1a:66:ca:b4:0d:86:5d:23:40:
b7:3a:a4:53:e3:09:45:72:1b:4a:78:ec:08:30:d9:86:97:41:
ef:8b:7a:e0:e4:d1:8e:0f:0b:32:3a:30:0f:f7:a7:38:34:58:
05:4d:f8:d7:6b:58:27:7a:fb:7f:6f:e4:23:55:e7:60:2f:81:
53:e6:af:6a:08:62:54:ee:40:ad:15:33:20:a3:b0:01:34:e3:
91:c5:cd:ae:dd:65:ca:90:ee:48:8f:71:26:02:fe:45:e5:f3:
ab:6a:40:7c:d0:91:41:b9:a8:59:2b:ab:b0:32:db:8f:66:f3:
0e:fb:1d:b8:5b:fb:e5:99:ab:38:62:65:d7:04:3f:90:06:e8:
57:6d:25:cd:ec:de:60:22:62:11:da:3b:31:d2:a8:a3:27:31:
69:c8:99:bd:a6:47:01:a6:79:73:51:5b:7c:d3:9f:d3:27:72:
82:36:f8:d5:64:a6:0a:8d:99:73:2b:24:89:10:13:95:cd:6c:
7b:d9:e2:9d:23:c0:ff:8a:3e:98:dd:c9:90:d4:a0:70:14:d2:
60:7b:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:15 2025 by rpki-client