Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: mWIwoC4sDNCete4cMLZhgAxuaRMAQKDxE9KBqsKgNm0=
Subject key identifier: C2:02:99:01:68:4A:A9:5D:9F:CC:49:43:A5:46:E5:11:A4:B9:BC:6A
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01983DD0296D2FB98B67271747C4C47A9E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1420
Signing time: Thu 24 Jul 2025 19:01:48 +0000
Manifest this update: Thu 24 Jul 2025 19:01:48 +0000
Manifest next update: Fri 25 Jul 2025 19:01:48 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: vleWGZ7Wj18CPkPFoETtQhXuqFD/RXYNLRu0LXikrcg=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:29:6d:2f:b9:8b:67:27:17:47:c4:c4:7a:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jul 24 19:01:48 2025 GMT
Not After : Jul 25 19:01:48 2025 GMT
Subject: CN=c2029901684aa95d9fcc4943a546e511a4b9bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:76:a7:32:a5:78:2f:88:a4:5f:b2:77:a8:
f3:c8:13:86:a8:aa:f7:02:cf:d9:c1:5f:40:f4:8c:
99:37:a2:17:e5:84:8c:6e:3b:2d:22:fe:7b:3e:56:
c2:e9:82:d4:de:40:c9:70:4b:06:4a:21:af:d6:48:
6b:f8:18:a2:15:e0:0a:2c:35:c3:98:93:d8:7d:a2:
1a:d3:6d:8e:6f:48:9a:45:2b:52:b2:6f:84:51:90:
15:54:f8:18:77:af:a5:ad:50:24:3f:23:a5:69:2f:
f3:a3:dc:ce:04:53:8d:e8:91:79:7f:d1:c1:81:0b:
15:5d:98:b6:36:17:0c:2d:c3:08:02:95:e4:7d:5a:
a8:1b:56:bf:12:ab:0e:4f:dc:af:af:f9:8f:74:5f:
9a:27:be:95:97:cd:06:27:25:2d:7f:97:8f:23:0a:
29:32:b0:5d:f9:36:91:8f:7d:0d:c7:d2:f7:67:6f:
28:1e:9e:88:8c:fe:09:d1:58:14:d2:3a:e0:02:8f:
e3:cf:70:ad:b6:f0:64:f3:e8:08:71:96:30:18:69:
ab:d8:78:34:e4:6e:e5:9c:d9:d7:72:89:8d:2c:f8:
d0:e6:e6:02:b3:00:bc:98:9d:e4:50:5f:5a:e7:6c:
50:50:df:32:2c:fd:26:3e:37:41:9a:95:72:4b:6a:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:99:01:68:4A:A9:5D:9F:CC:49:43:A5:46:E5:11:A4:B9:BC:6A
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5e:6a:40:e6:5f:7e:c4:97:9f:40:f2:2b:81:64:9e:0d:06:
49:82:6d:24:5a:b3:20:0a:13:9b:e2:b0:44:1c:2f:78:13:66:
0b:27:7d:16:87:db:e8:d4:fe:d1:63:62:e8:0e:85:7c:e7:a3:
32:24:20:a2:5b:c6:7e:b3:ab:0d:0d:48:48:9a:eb:ca:33:11:
2d:a8:76:e6:e6:b8:61:7f:e0:71:b6:12:27:27:64:04:8b:40:
c0:19:8f:48:e8:19:ed:cd:6f:cb:c6:97:03:38:22:1b:5a:02:
83:af:11:ed:cc:40:eb:68:01:0b:a0:fb:d8:51:e6:5a:87:9a:
e3:ab:dd:f1:b8:35:7f:61:1e:03:cf:eb:e4:3d:1a:ef:f4:e8:
f0:ee:bb:b2:3c:be:85:e1:d7:9c:7c:cb:a0:f4:6e:1a:7e:ec:
36:27:b1:45:f5:8c:66:92:90:09:70:32:26:1f:b1:81:38:fd:
c9:93:b8:50:66:98:1b:cf:3f:ae:a7:3a:f6:a4:db:d7:4d:9f:
e5:6d:c2:9a:f7:c3:ba:55:4f:94:52:1a:92:01:7d:14:67:79:
a7:7a:7b:3b:bd:27:00:61:56:48:6c:ab:68:3a:27:58:cd:6c:
ee:b5:d8:b2:7c:5d:eb:c2:77:79:3b:e6:74:c0:9a:df:63:32:
dd:ca:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:32:31 2025 by rpki-client