Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: na25rV2lbx1yewMhRxLMDMfWj6O8CJeoXS9LluIxxx0=
Subject key identifier: C3:3F:11:ED:24:95:E7:E4:0E:3E:61:DF:73:6F:96:BC:43:9B:A0:15
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 019849D3905C5254A377D2F18A219E6B795D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: 11
Signing time: Sun 27 Jul 2025 03:00:58 +0000
Manifest this update: Sun 27 Jul 2025 03:00:58 +0000
Manifest next update: Mon 28 Jul 2025 03:00:58 +0000
Files and hashes: 1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: OMD7PrUUDIehv6PMs2owapgCAC5hrP0pU0oHKxVWAnI=)
2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:90:5c:52:54:a3:77:d2:f1:8a:21:9e:6b:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Jul 27 03:00:58 2025 GMT
Not After : Jul 28 03:00:58 2025 GMT
Subject: CN=c33f11ed2495e7e40e3e61df736f96bc439ba015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:8a:b6:ac:8a:90:c9:ac:fa:45:9c:0b:17:
90:6e:0a:f0:89:9a:6d:f2:a9:15:8d:ab:94:c8:e6:
08:13:70:5d:d5:da:4b:0a:ff:61:d6:5a:0e:20:39:
e2:47:42:79:81:ed:68:df:92:0e:c5:22:76:f1:5c:
e2:56:17:b1:93:9a:2b:a9:17:4f:88:a3:c6:0a:0f:
a7:16:5b:cc:d3:7d:db:b3:33:e4:84:a5:18:73:88:
5b:86:e3:34:c5:68:dc:4e:1e:70:2b:0c:f3:ef:50:
8c:01:97:8e:20:42:f4:0b:c8:8c:54:60:d9:13:0b:
da:49:a7:7d:d8:a0:0d:93:9a:44:0a:6f:7c:53:ca:
47:64:bd:7c:e1:21:39:4c:94:63:26:57:7b:d8:a1:
6e:3d:66:80:9f:4c:f4:c4:b1:f6:37:a5:0e:21:23:
d4:f6:54:84:6a:f6:5f:2d:53:30:76:c3:90:1f:f3:
8d:6c:d3:eb:b0:d4:d1:9c:9f:4c:f4:37:4b:7e:6f:
48:3c:bc:2d:d3:ce:77:64:87:3d:c9:54:f0:6b:9e:
55:d1:31:e0:8c:54:f1:00:5a:48:7c:68:cf:f5:f8:
f3:88:e9:f6:16:1f:60:ac:f1:76:d5:aa:ec:15:ab:
8a:b9:8f:bb:00:cf:cd:63:f0:99:85:6d:d8:f0:50:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:11:ED:24:95:E7:E4:0E:3E:61:DF:73:6F:96:BC:43:9B:A0:15
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fb:e5:9d:96:6d:84:56:42:30:94:fe:c8:ee:4f:e4:90:0f:
87:20:5d:4a:08:8b:0a:45:9a:9e:b9:20:bf:ad:33:ef:89:85:
f6:12:e6:ca:5f:66:9f:74:1c:75:2e:51:6f:58:e0:af:b8:11:
b2:04:0d:1e:40:f5:8b:03:aa:0a:2b:39:d9:23:ab:c0:44:20:
af:01:f7:f7:21:35:d5:26:df:dc:26:96:1a:bb:f6:4d:66:56:
94:35:6d:29:f7:d8:1b:d5:db:3c:e8:0e:a1:de:44:09:36:6f:
c1:d2:22:28:bf:2b:74:ab:99:40:5e:c5:8b:d9:a0:c5:b7:ed:
e8:d7:52:11:d6:be:03:70:c0:38:ff:23:d8:cd:73:db:11:7f:
18:dc:c9:e2:d4:22:06:11:78:01:ec:51:99:97:f8:7d:ff:8c:
cc:0a:8c:a5:c8:1b:ec:70:fd:c5:8e:e7:3f:a8:48:b6:d4:da:
d1:1c:22:e0:83:00:97:b5:0a:5b:24:5c:1e:d3:d7:04:da:c5:
dc:9e:78:b0:24:d9:46:ae:0a:a2:cc:49:81:6b:e0:24:2a:50:
eb:2f:4f:b8:f5:b5:40:03:8a:62:1c:01:7d:f7:e4:a2:04:2e:
1d:ac:6d:07:9e:7e:c2:e1:f8:b2:50:0a:f9:9c:58:46:bd:99:
44:4b:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:30 2025 by rpki-client