Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: 10475fS6kBrk2uyUAOIpgdPVBM30u3RSq/1Nlk9CYxk=
Subject key identifier: 3C:05:F4:D9:02:43:79:94:7A:8E:51:61:42:02:AE:EE:A6:7A:16:FA
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019857C5D9376633D0294C232B6ED17C63F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 20:00:40 +0000
Manifest this update: Tue 29 Jul 2025 20:00:40 +0000
Manifest next update: Wed 30 Jul 2025 20:00:40 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: yKJk5FcGjq10ERagGOJ/KcDxPA9kBSF3ziHOsT55q1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c5:d9:37:66:33:d0:29:4c:23:2b:6e:d1:7c:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jul 29 20:00:40 2025 GMT
Not After : Jul 30 20:00:40 2025 GMT
Subject: CN=3c05f4d9024379947a8e51614202aeeea67a16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:30:ba:3d:c6:db:7a:be:ee:27:0f:96:5b:
22:e3:fb:9d:b0:16:8a:1b:9a:dc:13:98:cf:d5:96:
64:61:a5:2f:81:10:b6:69:19:89:67:2c:c1:6c:c1:
2f:20:9d:fd:03:79:b2:14:69:cf:90:f5:90:53:df:
be:53:e4:e7:62:3a:fc:20:e6:ef:ff:87:80:04:f8:
13:20:c1:19:69:32:34:ec:56:39:e3:75:46:20:21:
d1:f6:35:c4:ac:3d:1b:90:a3:76:c1:75:14:6a:72:
8c:7f:24:00:b1:3f:c1:10:0c:ca:eb:75:81:1e:26:
c5:d3:31:38:7d:6b:5a:97:77:91:8a:96:35:6e:09:
c7:65:c9:21:34:c7:49:ec:38:2f:2d:e2:b4:bf:7d:
44:87:fc:80:09:07:59:c0:35:95:50:22:53:3c:ad:
8a:31:a6:cb:ac:ad:77:e0:39:d1:04:be:6c:45:63:
2a:6c:a9:3e:60:12:79:ef:ea:f5:80:01:d8:ac:d8:
12:05:e0:f6:eb:d2:7a:bd:15:33:cf:93:b2:55:05:
57:97:b5:e0:aa:3b:02:77:ea:a8:54:6d:fa:c3:59:
ce:be:f1:31:39:f3:93:c9:3a:7a:09:f6:05:25:95:
30:69:a2:f2:98:12:2c:12:df:a9:ba:e6:18:73:5d:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:F4:D9:02:43:79:94:7A:8E:51:61:42:02:AE:EE:A6:7A:16:FA
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:38:2b:93:cb:28:b6:ed:08:d5:60:2c:ac:7d:a1:c0:f5:
8f:31:92:eb:39:53:82:1a:0a:91:59:e0:d3:ee:ae:c2:dc:1e:
7f:83:22:e5:64:f7:8a:93:b4:cc:39:50:e6:41:96:96:38:ae:
63:18:84:36:a2:07:0e:f3:73:a4:a6:91:6c:0b:b5:94:a9:26:
dd:21:79:cd:fa:35:7b:b0:a3:c1:bc:54:d9:0e:17:67:ad:b8:
0a:64:ba:7d:cb:32:55:9d:cf:4d:03:dd:d9:76:ff:cc:b2:0b:
90:b6:d6:79:ca:35:a0:56:a6:69:bf:2e:81:24:9a:f5:ea:a5:
77:64:4d:89:2e:80:8c:54:bd:a5:d3:e8:07:4d:7f:d4:e0:9a:
6a:a1:d1:05:c4:72:c6:eb:26:7d:03:5b:7b:ec:56:53:07:12:
ee:35:ef:87:4b:15:d7:be:ee:4e:ec:ca:58:1b:25:66:eb:fe:
3d:8e:2b:f1:20:2e:94:c7:c2:61:b2:44:2c:bd:2d:4e:22:ed:
0f:29:fe:80:a0:c7:df:d1:39:2a:87:f5:41:d0:4b:09:af:2d:
00:d6:bf:1f:cd:ff:5c:f0:a9:09:3b:3a:f4:ae:6f:f2:64:40:
e3:a2:7a:02:9b:36:c0:57:36:f6:02:3e:87:16:99:a5:f6:92:
b1:be:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:36:05 2025 by rpki-client