Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: Mkpczi2jhLOkzBTMH4HIiq185gCwAaFzhgFw70p7hbc=
Subject key identifier: F9:91:E3:35:4D:E4:B4:95:1D:FD:D5:DA:3E:85:68:EF:A2:51:AE:BA
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01984A40F3F2A9000320EED601F5AEA01627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 13F1
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: JDo9CS9qkRA7G1Kr0DSYrG2IkyP+fWZRIR/lr/l255k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f3:f2:a9:00:03:20:ee:d6:01:f5:ae:a0:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=f991e3354de4b4951dfdd5da3e8568efa251aeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:01:91:41:1a:04:46:7a:f1:f7:3c:90:93:
12:6c:82:02:38:23:72:a9:40:8f:71:f3:46:9d:ba:
a5:ba:14:9f:ef:60:ba:18:cc:4a:e3:e7:f2:b0:a4:
13:e2:2d:a7:d8:fc:72:82:0f:80:40:b1:29:3a:0a:
5f:69:5a:65:4a:96:69:91:8b:43:f6:ba:e2:ad:02:
a2:f0:ed:d0:54:73:ef:aa:2d:64:83:23:59:e6:fb:
9d:bf:8b:b7:7b:fa:43:85:af:d8:11:86:7e:40:00:
03:d5:56:d0:5f:d4:70:ab:ef:4a:a8:a5:cb:6b:46:
1f:8c:8f:ff:41:b4:36:65:6f:68:fe:f6:10:36:41:
18:e8:17:c1:ea:47:11:71:cf:e0:c5:95:62:32:e9:
88:96:f9:26:62:81:93:83:c3:6e:ff:be:32:14:5d:
45:7f:55:2c:f3:45:7a:6c:26:f2:34:9b:14:b8:fe:
84:4f:c2:27:0b:ec:85:fd:91:1b:91:04:3e:9b:1f:
20:7f:e2:ea:0a:95:5d:50:a7:42:76:58:bb:66:71:
1c:01:20:8b:d9:05:06:61:0f:ff:ee:12:4f:65:1d:
d9:79:4b:84:4c:d3:0d:0a:6e:5e:a6:97:a4:a2:6b:
42:93:7c:83:6f:7b:35:82:89:c9:ca:5e:c1:90:bd:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:E3:35:4D:E4:B4:95:1D:FD:D5:DA:3E:85:68:EF:A2:51:AE:BA
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2d:30:7f:b8:a8:7f:41:6a:10:7b:e6:e8:da:c6:19:c8:0a:
c1:11:62:d6:94:57:ae:7b:14:64:7e:56:84:32:f0:6c:4d:64:
76:4c:8e:b2:80:73:3e:d0:b0:48:4a:f9:eb:9d:1c:35:13:ac:
dc:6b:75:8b:2d:1a:8f:57:cf:4d:c5:2b:d6:01:ea:8c:74:3e:
be:10:6b:7a:1d:c4:20:6f:0b:4f:50:ed:64:d0:a7:b5:1a:7a:
ce:a5:55:32:4c:e7:58:3b:b6:fc:bd:53:02:25:e2:24:76:9d:
4c:11:27:b1:fd:50:53:67:da:21:10:1b:c1:e9:09:92:ff:57:
e5:50:df:5c:0c:45:2a:1b:c8:fa:50:90:7a:d5:f9:fd:8c:88:
e1:90:d1:fc:f5:8f:48:70:5c:7c:ec:8b:95:ee:50:69:ae:f1:
cf:12:40:c1:89:46:c0:e6:51:b4:52:a9:02:cb:79:23:e4:75:
8a:75:c5:da:f1:ab:1d:c0:98:b6:aa:e8:cf:02:80:db:9b:c0:
fe:5a:e7:71:f1:61:41:a8:42:75:28:b5:34:02:67:d5:2e:ca:
ba:35:a4:60:cc:94:c6:6e:47:7c:41:66:0a:b5:9a:e4:59:85:
b7:ca:dd:cb:30:9d:ee:6a:02:fd:ce:fd:3b:f6:cd:6e:57:14:
ed:5f:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:59 2025 by rpki-client