Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: 8FdcAQlvSDfcUUmDfXn2DOb+MCmMY4V4NPTpX8wZ9fI=
Subject key identifier: 5D:EA:25:BB:74:62:19:F8:4A:24:73:F0:59:9B:86:04:C6:D6:7D:B3
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01983616A18FCF3C14F91C82CF0DBF5E86F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0A47
Signing time: Wed 23 Jul 2025 07:01:49 +0000
Manifest this update: Wed 23 Jul 2025 07:01:49 +0000
Manifest next update: Thu 24 Jul 2025 07:01:49 +0000
Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: mZ5CQfgFBUzPbo68ejxBsBnJEz2YTxoRUASZXH0z/7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:a1:8f:cf:3c:14:f9:1c:82:cf:0d:bf:5e:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jul 23 07:01:49 2025 GMT
Not After : Jul 24 07:01:49 2025 GMT
Subject: CN=5dea25bb746219f84a2473f0599b8604c6d67db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:9d:d8:ed:04:4f:f9:db:9b:5f:76:fd:14:
57:c7:15:eb:09:4a:f2:fd:92:e2:7c:9d:d0:d4:3f:
1c:bb:22:44:2b:54:2a:44:9f:18:d9:32:b3:fc:ce:
1b:19:1f:c3:df:5f:81:25:df:5e:2d:07:d3:67:33:
68:85:29:b0:e1:e2:ae:64:36:3b:65:b7:04:f7:21:
6d:3c:f1:11:02:20:70:88:66:60:41:fa:bb:cc:3e:
35:14:6a:10:3a:1f:d1:18:30:96:c0:c8:30:85:16:
5b:47:cb:22:33:50:65:25:df:8f:ad:f6:67:73:c2:
6e:c7:b8:1d:89:22:a0:2e:d1:5c:54:ab:ec:ca:e3:
d4:0f:5c:df:f8:34:b8:ca:e9:4c:6d:4c:98:64:8c:
49:f7:25:5a:ff:e7:17:eb:0c:a5:65:ec:50:68:a2:
0d:8c:41:40:a5:bb:05:36:0e:42:76:87:fe:c3:6c:
ed:f2:dc:18:f9:7c:3a:21:ef:68:a1:b2:5b:47:e8:
61:6f:a2:25:d3:98:2f:4b:97:78:48:ad:cd:cf:f6:
09:81:51:ad:42:59:98:f7:1a:19:1e:6f:ae:f8:c2:
02:bc:55:ed:6a:01:73:9f:dc:be:0e:67:bd:37:70:
6e:ff:8a:94:c6:16:3e:a5:6d:b9:f4:29:e0:c5:dc:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:25:BB:74:62:19:F8:4A:24:73:F0:59:9B:86:04:C6:D6:7D:B3
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:4b:06:5c:48:87:0c:e6:6f:a6:51:47:60:30:eb:9e:cf:
fe:66:cf:dd:58:df:b4:ba:7f:d4:7f:b9:2e:34:28:9a:9e:31:
9d:d0:e6:b8:f0:af:8a:65:76:e3:7a:87:82:07:6b:69:b3:4b:
7b:01:8a:98:ec:93:5b:d0:15:32:1c:81:47:ac:6f:55:1e:12:
44:dc:37:c0:bf:74:ab:27:30:b7:87:ec:11:6d:4b:f9:87:0e:
56:8b:ea:b3:ac:ce:5b:33:2b:2e:5a:c2:a2:84:04:7c:19:5c:
49:e4:44:26:05:24:91:4e:14:cf:ca:6f:36:c1:1f:5e:76:41:
fc:a8:ae:b2:1d:6f:08:f1:11:ad:9b:c7:1d:7e:c0:8b:9a:56:
4b:a0:cf:64:f3:9d:da:fc:47:a7:5a:b5:b2:b2:07:d6:85:96:
20:34:54:f1:54:53:71:01:6a:09:0b:26:0f:e8:ad:24:a6:88:
f6:b6:a5:2c:ae:fc:68:b6:9b:85:5f:33:00:b5:a8:31:3e:0b:
4f:40:8e:cd:d3:1c:4c:d4:f6:c7:fb:5a:a5:42:16:c9:d2:88:
fb:4f:73:df:af:03:f2:ec:9d:78:01:8f:d4:ef:c9:18:81:cf:
02:8e:fa:81:e6:c8:88:4c:ef:9b:99:92:a8:55:9e:cb:fc:69:
57:c5:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:11 2025 by rpki-client