Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: nxKPEg8lCd/Fa0rcbWLi6jGl9jId3fNdYof3R6WiswE=
Subject key identifier: A6:99:1F:5C:55:A8:4E:50:E5:EC:F1:0F:4E:43:AD:12:A1:86:17:81
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0198597DF4BEA33D2199642BCBDBFE671CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0CD8
Signing time: Wed 30 Jul 2025 04:01:23 +0000
Manifest this update: Wed 30 Jul 2025 04:01:23 +0000
Manifest next update: Thu 31 Jul 2025 04:01:23 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: kqNsnb4uN98KRM4oUq0ZCoQ4Td+8cF+1U8bGxWcu564=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:7d:f4:be:a3:3d:21:99:64:2b:cb:db:fe:67:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jul 30 04:01:23 2025 GMT
Not After : Jul 31 04:01:23 2025 GMT
Subject: CN=a6991f5c55a84e50e5ecf10f4e43ad12a1861781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:b6:13:d2:16:7c:52:27:96:b2:5a:14:73:
f4:ed:ca:bd:ac:37:5b:a1:8f:c6:73:35:b6:e4:fa:
76:2b:92:3c:db:52:e0:fd:4e:24:2f:f0:5c:61:c9:
48:9c:c6:da:f9:9b:99:58:5b:60:f2:77:8a:89:00:
a1:14:66:88:dd:7a:a5:7e:33:c5:b7:51:f0:1f:bb:
6e:bd:83:23:50:e6:a4:47:ec:57:26:3f:c0:86:96:
2b:94:10:73:d1:ca:c3:dc:01:9c:9e:7d:76:99:22:
ff:f9:fe:b8:b1:3c:0c:29:eb:97:51:be:9a:5a:e4:
f1:d7:4c:42:0c:34:6b:65:b3:c0:54:46:03:81:01:
63:d2:9e:0d:86:46:67:f2:c4:01:5c:52:c4:da:de:
b9:cf:95:90:e8:86:fd:ad:51:2e:3d:67:a6:70:10:
0d:ce:6f:8e:0a:07:13:9e:e8:4b:63:8f:3c:04:90:
95:d1:fe:fc:a7:9d:c8:17:7d:ca:63:1f:dd:c5:72:
54:2a:a2:cd:3e:a0:b8:a3:fb:d8:fb:e5:f5:79:ca:
8e:bf:1e:63:bf:41:18:4e:13:7e:a9:1e:29:8d:54:
95:2e:6e:b3:87:63:cb:3b:a4:90:bf:f7:dd:bd:3d:
86:61:1f:10:7a:57:de:cd:4a:04:49:b6:55:04:b5:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:1F:5C:55:A8:4E:50:E5:EC:F1:0F:4E:43:AD:12:A1:86:17:81
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f3:8c:76:50:d0:00:d4:61:ff:74:d6:5e:a0:ce:dc:cd:8a:
0b:3c:ee:84:59:ba:78:84:a7:0f:ff:da:81:04:9b:0a:0d:44:
11:ef:39:ba:f1:df:2e:cc:d8:1f:2c:37:84:1a:bf:d4:4f:23:
de:a7:71:e1:6d:51:01:d2:c8:eb:39:ba:16:a2:5b:d6:45:f4:
92:5e:03:99:51:8e:09:dd:b0:30:9c:a2:04:72:b8:13:2b:34:
f2:04:1a:40:18:17:d7:e7:fa:eb:80:c6:ad:4e:2a:24:45:84:
5d:7c:61:90:84:01:5c:3b:c4:f4:5d:71:6c:a2:61:06:10:02:
74:c9:99:0e:7c:fd:c9:af:96:f8:a0:5b:d3:9b:98:b9:8f:8d:
9e:a9:d1:d8:d4:e1:a8:31:dd:46:33:f1:92:d6:67:e7:12:2f:
3d:1f:51:1c:af:4b:0c:9b:0b:77:47:0a:a3:36:85:10:0a:d6:
b9:3c:89:88:78:e1:46:ab:98:97:97:eb:47:8f:9d:58:c6:1e:
ba:9b:da:87:3f:17:2a:50:90:f7:31:95:13:76:ed:78:49:21:
e9:13:88:9b:f6:a5:c1:3d:54:72:ea:1f:6c:e4:b0:ed:bb:9b:
0e:79:b9:2a:10:f1:72:21:b6:13:66:62:57:07:50:35:1d:bf:
8e:d0:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 06:55:37 2025 by rpki-client