Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: fkOc0JxrJKgfKKXPTU6UilczgpkfW1PA8Yppqwp62AA=
Subject key identifier: BC:D9:67:F6:EE:FD:7A:CD:16:ED:06:26:80:6E:4A:24:EB:96:C4:06
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01984A09F1FFF96B898AEC2CA562486DED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0717
Signing time: Sun 27 Jul 2025 04:00:22 +0000
Manifest this update: Sun 27 Jul 2025 04:00:22 +0000
Manifest next update: Mon 28 Jul 2025 04:00:22 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: 9frrWQVOX+JYVTmcinASW2cLhYR5wsptqu34btMJ2ZA=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f1:ff:f9:6b:89:8a:ec:2c:a5:62:48:6d:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Jul 27 04:00:22 2025 GMT
Not After : Jul 28 04:00:22 2025 GMT
Subject: CN=bcd967f6eefd7acd16ed0626806e4a24eb96c406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:b5:70:7c:70:53:10:5b:00:43:60:72:b5:
16:0a:7f:89:e2:ad:4e:b1:25:70:ae:da:d4:39:a6:
8a:fb:c7:c6:1c:5f:0d:4b:fe:f1:89:85:82:a7:30:
9d:9f:e2:06:39:7a:c8:f5:30:fa:7c:2e:f1:3a:71:
cd:89:82:3e:fa:1e:91:c8:b3:2c:91:e5:20:68:c5:
12:a7:07:b6:9a:79:6d:19:18:d0:a3:73:1d:c7:c2:
26:4a:04:ad:13:6e:4d:ba:b3:c3:d8:21:16:8a:14:
86:5e:44:bc:55:42:b9:b4:3b:b0:33:9e:c4:e9:6b:
f8:9e:e5:5a:44:cf:a2:5e:49:6b:a4:61:22:ab:49:
01:0e:e0:5d:6d:cf:c4:c8:16:3e:18:a8:f2:5b:1a:
5d:ca:6c:3d:b4:4e:6f:d1:93:df:88:1f:bf:8c:d0:
7a:cc:5b:fb:e6:32:4d:cb:24:44:3b:a2:0f:67:ed:
26:84:5c:25:ad:8c:99:a3:0d:99:b6:12:44:6d:d2:
2c:23:e9:86:29:61:9d:43:0c:ce:55:ef:95:28:bd:
0a:c9:d6:48:d9:5a:eb:df:0c:97:af:7d:4c:99:35:
c4:41:76:16:0b:78:54:7a:df:4c:7a:b1:c6:89:26:
9c:fc:c4:69:0d:23:34:a6:fb:ab:2d:72:9a:d9:0c:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:67:F6:EE:FD:7A:CD:16:ED:06:26:80:6E:4A:24:EB:96:C4:06
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:78:3a:44:94:0e:7e:f3:fb:4a:34:bf:1e:56:98:44:8a:
68:87:7b:5b:3b:e2:c7:d5:4f:84:b1:63:95:5c:ec:42:70:da:
63:dd:18:fd:c8:73:9a:72:88:7d:c3:ee:a0:4e:90:c7:65:41:
82:f6:10:9b:7e:a2:e2:05:46:28:a8:2f:a8:8d:6b:9d:1c:50:
9d:2a:56:51:20:5f:07:8c:a9:02:9f:b0:f8:bb:6f:8d:89:a6:
55:9b:f9:0e:4b:77:1c:fa:bc:08:1d:78:50:07:72:5e:b6:84:
9a:32:a0:b1:8d:8b:8a:6e:3b:44:75:bd:d2:f3:e2:82:58:6e:
27:61:50:7a:f9:87:38:df:8b:37:8e:e9:ec:8e:4b:65:c7:83:
04:34:03:c7:79:36:ec:9c:41:4b:1b:b2:ff:07:1b:02:bd:9e:
6d:01:01:e6:3e:bb:b4:66:58:41:76:24:a7:3c:fa:4d:4d:ff:
5e:45:17:8c:6a:cb:0d:8b:58:18:20:86:94:da:d0:74:fd:66:
2f:4d:eb:00:79:29:08:e8:6c:5e:9d:a7:ca:f8:55:f0:9c:ce:
ee:04:fc:c4:0e:19:df:c5:9d:38:12:f1:4b:04:4a:d3:29:66:
47:17:0a:4d:58:41:e4:17:6c:13:08:99:81:77:a5:1a:67:70:
aa:26:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:37 2025 by rpki-client