Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: N3DqXcBN7skp4DQPfZgFmzoJ0X/MVdiBbmmPbMCn45Y=
Subject key identifier: 29:01:19:1A:8A:23:A7:26:D2:18:AE:6F:FB:63:F7:52:DF:72:4F:73
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 01984AE5E9313BC32FB466390690FE9646CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 031C
Signing time: Sun 27 Jul 2025 08:00:38 +0000
Manifest this update: Sun 27 Jul 2025 08:00:38 +0000
Manifest next update: Mon 28 Jul 2025 08:00:38 +0000
Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: DwifrOsmjJCZXdO8jznuPEjwTf1apUTCNee/MAuQUG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e9:31:3b:c3:2f:b4:66:39:06:90:fe:96:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Jul 27 08:00:38 2025 GMT
Not After : Jul 28 08:00:38 2025 GMT
Subject: CN=2901191a8a23a726d218ae6ffb63f752df724f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:96:6d:c6:46:13:83:26:ea:ac:43:f7:40:
4c:e0:ee:9b:e6:8f:f5:1a:e3:b5:54:09:c6:b1:14:
4c:40:3b:3f:7d:35:05:1f:f8:5d:e2:8c:8e:fb:54:
bb:36:63:6c:fe:07:68:61:27:36:9b:cb:26:e4:3c:
7a:47:cb:fb:8b:4c:81:a3:e4:a2:48:79:1e:5f:ee:
25:c0:9a:79:a7:60:bf:96:96:73:93:f5:a1:67:1a:
a5:b8:30:0e:78:4e:c8:b3:1f:3d:07:d6:73:c1:e0:
31:4e:50:0a:b7:8a:72:f9:ce:3a:03:77:f6:d3:a2:
46:8d:45:40:31:f1:7c:ce:1e:67:34:17:fc:16:31:
b2:53:d3:76:a4:39:58:2e:a8:ff:cc:d9:49:30:48:
44:22:c0:b1:e2:ff:cb:05:51:c4:9e:57:d9:53:98:
49:cd:cc:7d:c7:f0:29:4e:4d:39:7a:14:f5:01:ec:
16:09:66:7a:da:de:36:0c:97:b3:c3:ee:cb:84:4b:
69:2c:08:70:e2:2d:44:0d:40:e5:60:81:83:81:6b:
18:ee:c8:aa:23:18:31:dd:4c:18:ae:0c:81:e0:7c:
bc:62:a7:5c:2c:ea:f0:f1:c8:0b:4d:e5:38:9d:73:
8d:2d:74:da:1d:92:45:8d:4e:9b:e5:90:fb:d3:95:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:19:1A:8A:23:A7:26:D2:18:AE:6F:FB:63:F7:52:DF:72:4F:73
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:06:26:ac:aa:f8:d0:60:69:62:e8:7d:3e:60:9a:f0:cc:6e:
c6:63:91:0a:5b:ba:6b:0c:d5:be:e4:98:6a:fb:a8:25:28:98:
79:22:f6:16:79:6f:85:63:d4:c3:0b:63:62:2e:ef:f2:dc:a9:
24:a3:b1:d2:92:03:64:ec:29:47:ee:7d:60:67:27:93:5d:dc:
50:70:fb:93:ba:a3:42:e1:4a:3e:6a:d2:49:9e:46:89:07:c2:
e4:20:81:f2:2e:26:ad:3b:fe:e3:b3:2f:f4:72:89:2b:72:ce:
48:ec:37:17:aa:38:bb:8c:f4:6e:e1:dc:73:a3:5e:4c:bf:bd:
c7:c3:76:96:70:ae:21:f1:fa:da:65:74:15:51:06:50:30:58:
af:77:4d:40:e9:35:13:bb:c0:d6:16:5b:c2:7a:53:f7:7b:fb:
0c:33:f6:a1:c4:50:0a:89:64:9d:e3:95:02:81:b1:07:cd:8c:
fd:b2:fa:f0:01:76:b3:61:5c:52:61:ba:52:a2:c7:3b:dd:03:
ff:a1:1a:41:e0:6e:03:14:4c:97:14:43:26:46:8e:9e:77:a4:
c7:30:00:c2:2f:13:b8:3d:df:ca:cb:d6:99:97:89:0e:c3:6d:
c2:d6:55:61:5b:22:b3:89:7b:6e:5f:3b:6d:61:1b:ee:93:1d:
de:a0:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:19 2025 by rpki-client