
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: HJKIUXtZbZTNZVgEP5H/h/ij5E4/pRAf0XhbXBRF4G4=
Subject key identifier: DB:53:F7:D3:EE:FA:AE:06:10:26:10:DD:5A:5B:76:D9:8B:B3:E3:28
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 01984A40F3BB7C19A3934A2D8B12A4FAB1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 0388
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: c7tBGCCuvyMj82ME1fCA/sNNFG/Utp88GUnaycbYmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f3:bb:7c:19:a3:93:4a:2d:8b:12:a4:fa:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=db53f7d3eefaae06102610dd5a5b76d98bb3e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:cd:48:0e:94:0e:d2:89:6a:07:25:fd:09:
60:2b:33:58:bc:ce:99:4a:4d:2d:89:e8:64:df:7b:
2c:b6:ff:88:df:25:36:47:dd:73:28:6f:99:ae:07:
ba:98:d2:4b:c8:4c:d5:ae:4d:8d:82:07:12:31:1a:
48:5b:2d:73:5f:74:d9:3a:fb:ca:46:2a:43:93:28:
89:cd:6f:99:ad:8c:ef:03:27:8b:bf:40:b4:ba:52:
6c:17:f5:ed:0f:cc:f1:bc:d9:72:3f:8e:e6:c5:ae:
05:3b:cd:33:54:dc:3a:8b:b5:b5:40:60:2f:94:53:
77:5f:bf:e6:ba:f5:50:f5:9e:ab:0c:29:99:6d:8b:
48:96:9c:e3:e4:31:9e:63:9e:67:e1:bf:a2:01:7b:
31:e7:d1:a8:64:6e:f3:74:ee:6d:14:bb:d9:11:a1:
4b:9c:35:ff:06:4a:ed:cc:49:f5:f2:d9:08:81:23:
05:b5:d3:96:ec:c3:87:89:52:ec:9a:dd:ee:71:fc:
dd:85:0a:6c:a6:47:73:b6:28:85:44:4f:7e:de:62:
6c:08:15:b8:16:ae:22:33:07:82:0c:a5:0d:2b:d6:
8a:cb:b9:f7:ed:93:a9:2e:b6:4e:db:69:1d:02:a0:
bd:36:2c:99:02:d2:e3:8c:ad:d6:b1:80:55:7c:2f:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:53:F7:D3:EE:FA:AE:06:10:26:10:DD:5A:5B:76:D9:8B:B3:E3:28
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:09:d2:30:75:eb:ec:8b:45:f6:6f:77:c6:e1:28:31:5e:
d5:93:c1:4c:35:ce:1a:10:c7:3c:6b:a5:f6:08:4d:56:dc:86:
96:18:5c:ad:d4:34:1f:80:e9:07:b1:66:dc:26:0e:50:b5:59:
d4:a8:7f:e8:11:c2:e8:32:aa:d8:ec:aa:43:83:bb:e0:05:b0:
31:fd:f1:31:ba:a9:e8:b9:ea:48:32:95:07:78:23:a8:10:82:
b5:00:31:11:8a:74:34:32:69:34:af:9c:a2:8a:88:44:9e:68:
09:07:5c:d3:ec:53:d5:5f:41:3a:a3:39:49:53:2c:ad:74:2a:
7e:06:e6:3f:4a:5b:93:6f:e3:0c:35:b0:fe:21:55:1b:f9:af:
34:7c:af:a7:12:df:9e:a7:5a:cb:32:dd:ce:0e:dc:ed:57:ae:
ac:0b:4c:27:58:96:c4:4a:be:b1:38:8b:bc:2f:dd:c6:78:71:
6f:10:de:c7:75:46:70:fc:ee:8a:6a:6a:cc:fd:71:d3:c4:f3:
ac:fb:4f:5b:70:14:29:c6:3f:18:11:ae:6f:39:45:f6:8c:eb:
44:d6:88:67:54:d8:26:b1:d7:cb:04:96:a4:af:db:13:6a:66:
5a:98:c4:2d:28:73:17:5b:39:2e:d4:d9:cc:42:c3:b1:e6:4a:
3f:7e:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:08:24 2025 by rpki-client