Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier: ZKLfkhynilBPFABn5qpHI+I2rfkovRBFqOApULJBrIo=
Subject key identifier: 2C:8C:27:24:1E:82:3F:6E:8A:79:42:B7:7C:3A:02:C3:29:DB:27:54
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial: 0198537AFA97C972DF7A835BA22721B018D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number: 0F69
Signing time: Tue 29 Jul 2025 00:00:25 +0000
Manifest this update: Tue 29 Jul 2025 00:00:25 +0000
Manifest next update: Wed 30 Jul 2025 00:00:25 +0000
Files and hashes: 1: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (hash: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=)
2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: 9Tq92tzpZPmEerheAi/ojF/mC6MKopME7coQY+BQutc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:fa:97:c9:72:df:7a:83:5b:a2:27:21:b0:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Validity
Not Before: Jul 29 00:00:25 2025 GMT
Not After : Jul 30 00:00:25 2025 GMT
Subject: CN=2c8c27241e823f6e8a7942b77c3a02c329db2754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:b4:00:8b:9e:5f:68:6f:31:43:b9:ae:e7:
b6:a5:93:b8:4d:8d:01:d5:cf:8a:c6:7c:71:00:0f:
f6:a7:bc:e8:07:96:ab:eb:de:20:05:95:5a:2b:dd:
3e:2c:f0:5e:bb:52:95:ce:27:9f:bc:4c:30:b6:4f:
1f:78:36:a8:de:6f:74:0e:99:cf:04:ee:fc:da:b3:
90:53:a7:83:e8:8b:ef:80:66:ae:71:8b:98:50:a6:
ae:cd:9a:d0:d1:c8:07:d1:4b:f0:69:fd:4e:29:04:
9f:18:04:d4:0a:76:6a:2d:47:8b:8b:aa:2f:89:ec:
73:96:66:b3:8c:0c:ba:7b:a2:03:ef:37:0d:3e:c3:
06:47:1e:ca:b0:b8:3c:f7:a9:eb:8e:33:55:4b:a4:
bd:99:6f:70:d5:d2:a2:7e:e9:21:87:39:98:6f:8e:
8a:af:04:93:28:3c:21:5f:01:92:98:07:2c:d4:cc:
6c:65:65:0d:d0:33:8a:11:7e:68:32:5c:f1:10:e5:
85:cb:7e:e4:32:26:d9:1e:bf:d5:3a:13:fc:8d:cc:
a0:92:bb:45:e5:10:0d:f5:bf:03:3b:e4:07:43:15:
75:e5:fe:46:b2:e7:0d:2b:4e:a0:84:ce:60:33:b4:
57:e1:67:2c:6b:9f:bf:65:24:25:9f:26:b9:69:49:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:27:24:1E:82:3F:6E:8A:79:42:B7:7C:3A:02:C3:29:DB:27:54
X509v3 Authority Key Identifier:
keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:aa:9b:a0:1d:d8:04:42:e2:12:17:93:1c:fc:79:0e:08:
55:2e:4e:45:95:96:c4:12:43:7f:b8:9e:33:59:b5:00:28:47:
23:67:df:fd:ff:ea:01:1d:06:cd:c3:71:02:5e:a5:cc:75:39:
3e:1b:d1:5d:2a:f2:ef:eb:00:90:c5:36:81:17:1a:99:3a:44:
33:85:90:ef:3b:90:83:7e:5f:5f:8d:75:00:f8:44:1a:ea:45:
e5:32:11:d0:23:89:8f:d5:8a:a2:73:76:93:66:c0:b4:40:94:
98:24:c3:f2:0b:b0:b9:51:7a:2e:81:a8:1d:15:f9:3f:39:57:
ff:3a:40:0b:81:19:6b:68:e1:a2:16:f1:3a:da:e9:9a:11:7e:
10:f6:92:95:a3:5b:b5:20:ed:3e:82:c3:f2:ba:ba:c3:32:40:
02:36:a3:10:8c:a1:02:ad:9f:e0:a4:33:c6:1e:8d:1d:dd:99:
90:b0:fd:4f:f3:63:3c:a7:21:8f:e3:79:e8:68:36:30:41:99:
74:8c:79:9f:79:54:a8:50:5c:d4:5f:8e:ae:84:64:d5:4d:42:
70:14:77:72:63:5f:a8:4e:cd:b3:83:2a:c9:93:d6:dd:72:b2:
7f:8f:24:fd:48:d2:4a:e3:5e:04:7b:10:c9:3e:9d:30:5f:ab:
c3:20:eb:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTevqXyXLfeoNboichsBjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDdjY2MzMDkyOTFkYzgxYjE5MTQzZDRkM2ZlMjhkMDFj
NmJlYmQwHhcNMjUwNzI5MDAwMDI1WhcNMjUwNzMwMDAwMDI1WjAzMTEwLwYDVQQD
EygyYzhjMjcyNDFlODIzZjZlOGE3OTQyYjc3YzNhMDJjMzI5ZGIyNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaS0AIueX2hvMUO5rue2pZO4TY0B
1c+KxnxxAA/2p7zoB5ar694gBZVaK90+LPBeu1KVziefvEwwtk8feDao3m90DpnP
BO782rOQU6eD6IvvgGaucYuYUKauzZrQ0cgH0Uvwaf1OKQSfGATUCnZqLUeLi6ov
iexzlmazjAy6e6ID7zcNPsMGRx7KsLg896nrjjNVS6S9mW9w1dKifukhhzmYb46K
rwSTKDwhXwGSmAcs1MxsZWUN0DOKEX5oMlzxEOWFy37kMibZHr/VOhP8jcygkrtF
5RAN9b8DO+QHQxV15f5GsucNK06ghM5gM7RX4Wcsa5+/ZSQlnya5aUm7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyMJyQegj9uinlCt3w6AsMp2ydUMB8GA1UdIwQY
MBaAFHYHzMMJKR3IGxkUPU0/4o0Bxr69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmIt
Yzk0ZmU0Yzk3MWQ0LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmItYzk0ZmU0Yzk3MWQ0
LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv+qm6Ad
2ARC4hIXkxz8eQ4IVS5ORZWWxBJDf7ieM1m1AChHI2ff/f/qAR0GzcNxAl6lzHU5
PhvRXSry7+sAkMU2gRcamTpEM4WQ7zuQg35fX411APhEGupF5TIR0COJj9WKonN2
k2bAtECUmCTD8guwuVF6LoGoHRX5PzlX/zpAC4EZa2jhohbxOtrpmhF+EPaSlaNb
tSDtPoLD8rq6wzJAAjajEIyhAq2f4KQzxh6NHd2ZkLD9T/NjPKchj+N56Gg2MEGZ
dIx5n3lUqFBc1F+OroRk1U1CcBR3cmNfqE7Ns4MqyZPW3XKyf48k/UjSSuNeBHsQ
yT6dMF+rwyDr0A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:41:01 2025 by rpki-client