Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier: 4MkH8w8Tg3w5nICjQPeKBIerG2F208QIv0z6WpQaHh8=
Subject key identifier: 3D:EF:E6:41:59:AC:EC:CF:F3:41:3A:FD:61:72:16:AD:A9:73:25:FE
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 019849662682056AC51E93890519FC3D9908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:27 +0000
Manifest this update: Sun 27 Jul 2025 01:01:27 +0000
Manifest next update: Mon 28 Jul 2025 01:01:27 +0000
Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: CduznGxG4gYmdkHBrmz7zMo9yImJKetWbhYVh4M1dsM=)
2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:26:82:05:6a:c5:1e:93:89:05:19:fc:3d:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Jul 27 01:01:27 2025 GMT
Not After : Jul 28 01:01:27 2025 GMT
Subject: CN=3defe64159aceccff3413afd617216ada97325fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:3a:68:96:0c:b0:5a:50:3a:9a:66:42:b5:
5e:b6:d3:92:a0:9c:97:b6:29:1c:f7:e0:62:a4:7a:
9f:2d:c5:59:95:85:0a:3c:cc:95:92:5f:a7:2f:09:
1d:81:4c:56:95:4d:ec:9d:89:b4:65:73:d7:00:95:
d9:fa:6b:33:ec:0f:35:ef:df:0a:4e:b7:d6:4f:b0:
b4:f8:74:f1:78:9e:71:6e:ac:bb:f9:92:f4:bd:1b:
84:c8:a2:2a:85:15:b1:ad:0a:e3:54:84:1f:53:33:
8f:ff:59:8a:35:bd:c1:f9:6f:64:bd:69:92:02:17:
8e:a7:02:e0:02:6f:b1:8a:48:83:cc:74:c3:53:9b:
20:1a:27:17:8c:26:45:24:72:37:30:1d:cc:21:42:
67:88:4d:6b:f7:be:c5:62:cb:37:4d:51:07:94:30:
8f:8d:f9:28:87:5d:9b:3b:4c:7c:ac:3a:c6:3c:ee:
53:f8:3c:58:6e:5a:ca:6d:aa:30:39:2f:8d:6d:f5:
ea:ab:33:80:9a:0a:6b:d5:c7:ab:52:c0:5b:bc:02:
96:bb:19:20:51:1a:eb:8e:58:4a:34:42:99:2d:87:
31:1b:d6:6c:6b:aa:fe:56:16:e9:8c:af:51:2b:b8:
b3:0d:1b:c7:69:68:64:61:29:7b:cd:dd:0a:6f:e8:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:E6:41:59:AC:EC:CF:F3:41:3A:FD:61:72:16:AD:A9:73:25:FE
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1f:eb:95:af:44:32:a0:2d:f9:c4:52:a6:04:fd:83:87:01:
f1:93:02:cc:ee:66:99:98:d9:a2:ed:02:48:fc:57:9c:eb:1b:
24:fb:2d:28:9e:f1:3b:fa:aa:1b:c3:a4:e5:e7:65:85:fc:be:
8d:46:d7:b5:17:02:ac:2e:c5:4f:6c:2d:b2:8a:88:46:df:b3:
5b:5d:df:97:d4:88:11:eb:1b:22:9a:2c:22:0d:45:28:15:0d:
40:60:60:5d:9c:a5:c3:28:67:ca:2a:6b:3c:e9:75:6f:76:d3:
f3:78:0f:da:f2:be:06:ca:8c:a1:19:48:51:cf:81:62:a1:86:
3b:b5:d9:b2:a4:4b:43:68:0c:ee:54:de:df:8d:79:df:11:70:
b6:de:9c:9f:90:cf:bf:93:39:fa:24:b3:39:04:68:a9:43:b3:
b6:4b:1c:ca:74:a7:4c:75:2a:6f:93:b9:8d:8e:44:f0:ec:b1:
43:02:22:0a:e0:26:18:e6:f1:0f:b9:0c:b3:38:f6:f5:c2:f4:
3a:96:25:61:51:29:57:d2:0c:53:64:d9:00:b7:d1:ea:1b:8a:
19:0e:14:db:98:70:b2:6c:f1:f0:de:a2:c6:60:3f:94:99:af:
79:5a:d8:79:49:12:b9:6f:fe:e9:68:5c:e9:3e:b1:45:31:54:
8f:54:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:04:25 2025 by rpki-client