Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: BR1dMV1sTMg3+cwlGoyyo7xV0dh4ZCtPYW07m0QhdZM=
Subject key identifier: 39:BB:B9:65:38:E2:37:89:2F:6E:B9:7D:91:0D:55:FF:76:E8:16:3C
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01984966A9831147D15B2EBB25D3ABFFB56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1685
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: 7roJ9Boi0eV2JzRXKtBwY7JUS9b8L45JAnX7gk7QqtQ=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a9:83:11:47:d1:5b:2e:bb:25:d3:ab:ff:b5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=39bbb96538e237892f6eb97d910d55ff76e8163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f1:0e:9f:42:ed:03:a4:bd:15:38:6c:5b:52:
88:8b:11:a2:00:f1:68:9b:3e:a0:5a:58:69:31:60:
58:9e:d5:c4:4b:0d:e8:19:6f:36:f0:4f:29:0c:d5:
7e:8e:51:c2:7a:c4:35:01:77:f2:cb:22:1e:a0:93:
b1:1b:9b:6e:47:5a:c3:04:d3:c1:97:59:da:78:78:
dc:ba:77:77:fe:3c:b0:e7:39:26:77:d9:a2:0d:a7:
27:47:ff:12:77:af:3f:75:8e:37:d9:53:51:0f:6d:
28:74:c5:41:ae:47:20:5b:31:c9:0f:81:28:10:32:
de:43:4e:08:05:fa:b9:a1:a9:96:37:0b:35:da:9d:
a6:62:fa:b8:4c:33:c0:68:a2:51:ce:c7:15:6d:89:
4d:ec:5a:8f:a9:31:d9:13:47:53:9a:f3:34:cd:8e:
97:7f:03:49:8b:25:eb:d3:37:a0:77:43:78:eb:62:
0b:90:8d:ea:c8:f8:42:ef:c5:9f:2f:bc:cb:d0:2b:
e8:6f:3e:9c:78:45:41:1c:60:bb:bc:b2:c5:5a:bd:
9b:75:07:74:fd:43:aa:c6:ac:c5:7d:c1:f1:65:40:
77:08:0b:ba:49:3e:0e:af:de:9f:f3:51:9e:4b:67:
ee:73:fb:ac:f3:92:69:b2:fe:a8:ce:23:f8:ba:37:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:B9:65:38:E2:37:89:2F:6E:B9:7D:91:0D:55:FF:76:E8:16:3C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:23:36:15:3f:60:82:2d:ce:83:c0:1d:b2:9f:bd:f2:75:01:
e9:50:7f:c1:55:5d:cf:de:9a:6b:ed:61:64:4e:23:5e:bb:93:
3e:4c:ae:52:8d:54:7b:1a:6b:0b:7f:05:98:ff:ed:bc:7f:ed:
dd:4b:c7:54:e7:63:be:e4:97:ea:1f:56:6b:fe:a1:56:a7:18:
fd:ce:aa:4a:71:b8:24:bb:92:19:f6:aa:8e:18:fe:07:f2:84:
0e:4b:c4:bb:1c:fb:d0:de:1a:63:01:f5:7b:88:da:6a:78:d0:
37:d4:71:c9:19:47:cc:41:62:54:47:9c:71:44:dd:66:8b:7b:
49:fc:a7:94:29:0d:82:53:34:f0:4f:70:04:d2:26:e3:fc:33:
af:32:5a:bb:af:e1:0f:18:66:ff:e9:4d:d5:b2:13:44:a2:ba:
ed:a6:69:f6:48:4d:db:bc:9f:50:5b:24:e3:9c:0e:48:26:96:
d5:18:5c:04:b4:31:e4:a2:8c:23:01:ae:2d:09:43:91:bf:03:
c1:e5:62:ad:16:03:f2:c5:f8:6c:35:a2:51:f6:f1:f0:c7:d7:
96:34:01:fe:ac:3a:88:52:24:fc:2a:58:c9:07:f2:59:1e:fa:
01:d5:97:c4:5f:53:e9:d9:2c:a4:7d:29:b4:ab:3d:1c:c4:f7:
e6:db:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:45 2025 by rpki-client