Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: MAsVr0Kg/zVEXq/w0xUzy4QkGItBU0JezWfW06lVzjk=
Subject key identifier: 86:45:58:C8:EA:F8:8D:C4:7D:70:65:29:D9:A6:CC:8D:B9:67:85:FE
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 01985C47CAEEB53AA59FCE7750728003B13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 011B
Signing time: Wed 30 Jul 2025 17:01:05 +0000
Manifest this update: Wed 30 Jul 2025 17:01:05 +0000
Manifest next update: Thu 31 Jul 2025 17:01:05 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: fNVfb9yQksfk8xsghZmRmf7EaLUnM1LuGDI9Czu5qEg=)
2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:47:ca:ee:b5:3a:a5:9f:ce:77:50:72:80:03:b1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Jul 30 17:01:05 2025 GMT
Not After : Jul 31 17:01:05 2025 GMT
Subject: CN=864558c8eaf88dc47d706529d9a6cc8db96785fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:0a:75:d7:d4:59:3f:30:10:21:9d:31:69:
96:c5:7c:b8:87:4c:a6:c8:83:5c:5f:f6:85:eb:8b:
99:0b:c7:89:14:d2:dd:99:0c:88:7a:28:ba:e5:b9:
87:51:b3:d9:7e:58:0b:77:72:c1:be:87:20:f0:76:
b7:63:f4:42:76:e7:57:60:4d:e3:08:ee:15:f3:79:
70:52:e3:39:a4:63:79:59:89:27:d1:bb:a8:a8:fa:
96:2b:41:db:6f:97:22:8a:1f:48:57:cb:b3:aa:37:
b8:79:28:d1:1b:48:71:5a:ef:4a:55:a0:2c:c1:15:
0c:90:ff:86:8a:82:b4:28:5a:25:44:8a:c1:97:50:
1e:02:6c:f4:79:7c:ef:a5:88:ff:2f:cf:49:32:e7:
66:d3:10:86:e0:81:a3:14:82:02:99:e5:d8:17:b8:
d4:72:3c:d9:b4:33:76:0e:45:a3:21:14:14:01:25:
e8:49:8a:6c:09:e9:6c:96:e1:24:7b:2c:cf:16:5c:
45:a5:6f:fc:fd:74:57:d5:72:d0:a5:80:dc:af:c3:
d6:41:f0:03:7a:e9:04:b9:aa:23:2a:4c:2b:2c:a0:
41:46:e5:90:b4:62:3a:5a:95:c9:ba:f5:9d:97:36:
60:92:8b:8d:23:c5:5b:51:64:86:dd:44:cb:9d:8b:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:58:C8:EA:F8:8D:C4:7D:70:65:29:D9:A6:CC:8D:B9:67:85:FE
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:6d:0c:eb:ae:89:44:fd:05:65:79:20:4a:f0:32:37:df:
ec:2e:bb:23:7e:8a:e4:32:1d:35:e4:37:bb:e2:d0:05:59:83:
6b:dd:4f:bb:82:37:13:70:a3:5a:2a:f1:8d:e1:5b:b1:60:9c:
11:54:49:6e:51:98:76:d8:e2:e2:e2:8e:84:b8:85:55:29:09:
68:58:de:62:4c:4a:13:19:59:f1:9a:2e:e2:bc:52:e2:25:d0:
45:bc:20:23:82:9e:73:c6:66:b0:59:9a:3f:ed:0d:47:94:2f:
e8:15:80:b4:6e:9f:2f:f4:99:24:de:6b:b9:59:aa:1c:94:cc:
5b:a3:9e:16:f5:54:84:83:f4:20:d7:74:f9:44:78:11:c5:2f:
50:11:2d:69:2f:51:aa:71:5c:c2:94:82:ef:6a:c1:31:34:28:
3c:24:f8:44:27:ef:7f:a8:7b:90:58:b8:15:9c:ce:0d:40:4e:
f0:74:6d:ef:e6:be:1c:9c:80:72:fc:19:bd:1f:c9:66:a5:ec:
19:b8:33:05:cf:96:82:9c:35:17:64:dd:3b:57:43:7b:22:48:
ae:35:ff:a3:40:18:38:dc:f3:9b:f9:13:b0:e2:c0:bd:af:42:
4d:55:d6:53:40:ab:b8:9c:77:07:23:a3:65:ba:56:da:bd:04:
f1:3c:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:34:49 2025 by rpki-client