Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: hFxBjQNUYolPif35IMDq2+JIIGqdZMrEUxkPWbsdWlA=
Subject key identifier: 74:C5:08:9E:C6:07:A3:EB:34:76:D4:A3:76:36:67:E7:11:22:85:A8
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 01984A77ECC22CF617BCDA538FC59BB0A3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0384
Signing time: Sun 27 Jul 2025 06:00:29 +0000
Manifest this update: Sun 27 Jul 2025 06:00:29 +0000
Manifest next update: Mon 28 Jul 2025 06:00:29 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: zR5FPF0W6V22WaZ7ePLVLOPZwJcoiFiSSBiUq0SZA4U=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ec:c2:2c:f6:17:bc:da:53:8f:c5:9b:b0:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jul 27 06:00:29 2025 GMT
Not After : Jul 28 06:00:29 2025 GMT
Subject: CN=74c5089ec607a3eb3476d4a3763667e7112285a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:5e:75:8c:9e:5b:4c:67:86:64:3d:af:d8:
b3:9a:77:cf:97:5d:9e:c1:f1:34:94:54:f5:a7:14:
4e:6d:0c:2a:48:c5:9d:08:7c:e5:52:0a:00:be:6b:
8f:cb:a2:b5:ac:42:95:72:93:81:19:ba:7f:9a:c2:
65:20:25:18:bd:29:73:a8:a0:c9:2e:7f:c7:72:6d:
02:8f:86:74:4c:b4:c5:83:22:36:bf:fc:6b:b2:6c:
02:52:75:13:3b:47:3a:6e:d7:00:d2:05:fe:20:a7:
c6:a7:4f:a3:65:c0:7d:d4:fe:d8:39:bb:bd:40:fd:
ce:9d:7a:aa:df:4d:f3:17:c9:eb:b0:7d:97:39:91:
88:c2:8f:55:1c:51:a4:24:eb:99:03:28:d3:39:f1:
41:fb:02:5e:df:9d:6b:cc:ba:b6:9c:7e:0e:ac:fd:
b9:38:d1:e3:19:10:40:21:88:55:f1:71:db:47:5c:
fe:c4:30:05:18:9f:71:3c:11:91:78:64:be:87:ad:
28:11:78:74:07:c2:42:39:32:7e:32:5d:03:f7:ba:
d5:c7:ea:54:e8:d5:b3:fd:06:2b:18:7f:e6:54:5e:
47:b3:2b:a8:d1:55:9d:38:79:1d:c6:88:d8:ae:03:
bd:39:66:a9:78:ed:30:b8:69:a3:e2:53:f8:d4:5b:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:08:9E:C6:07:A3:EB:34:76:D4:A3:76:36:67:E7:11:22:85:A8
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:27:4c:92:cf:55:b1:84:cb:95:3d:e2:99:36:a7:49:94:68:
d5:4c:af:0d:72:c5:0f:fc:1b:21:21:33:9c:16:c1:19:1d:1b:
b6:cf:a8:b8:b8:46:2b:67:a9:15:18:07:72:4b:ad:1a:03:14:
06:57:1d:f4:77:7e:1e:f8:f4:cc:08:29:06:3f:06:ae:a2:1c:
cb:37:fd:ac:a8:cb:42:e9:f2:a7:25:1a:50:68:a5:0e:29:18:
0a:83:f7:67:78:d1:df:80:42:46:17:4f:b0:02:99:71:1e:b7:
80:3f:a9:90:47:4e:c2:18:96:11:89:33:f5:99:3e:38:5c:cd:
82:7d:f0:49:35:73:6a:ce:00:96:7d:71:b2:ec:cf:e9:a0:45:
11:87:3e:d0:42:06:84:5d:fb:b1:c0:0b:5a:66:20:02:3a:6a:
1b:59:9f:64:da:8e:44:f6:b4:6d:f2:91:14:1d:83:fb:9e:1d:
d1:05:ce:6d:b1:37:b9:b6:0e:5b:4a:f3:c0:01:a2:7c:4a:34:
ca:1e:e8:95:53:97:b4:24:38:22:4c:8c:3f:de:dd:56:e2:8d:
1a:1c:d7:1d:57:fc:f1:6e:9e:a6:59:db:ff:15:31:30:9e:0c:
22:71:06:3d:35:df:60:fd:25:b9:6e:1e:35:7e:3d:42:f2:16:
ae:8c:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:43 2025 by rpki-client