Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: PAQ571TVe10N3FCaWynqMZAJMCoTiRBLV4jzUf1VoFw=
Subject key identifier: F9:F5:C7:6B:06:2D:34:DB:01:0A:39:35:67:8A:ED:C0:17:3D:05:5F
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 0198469B17550DBF26EFB7A5E1A38B1AA3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 1327
Signing time: Sat 26 Jul 2025 12:00:25 +0000
Manifest this update: Sat 26 Jul 2025 12:00:25 +0000
Manifest next update: Sun 27 Jul 2025 12:00:25 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: AWYOp+zmHSJId+1QA1tGgmU1a8RPxUdd6SribGk9oEY=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:17:55:0d:bf:26:ef:b7:a5:e1:a3:8b:1a:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jul 26 12:00:25 2025 GMT
Not After : Jul 27 12:00:25 2025 GMT
Subject: CN=f9f5c76b062d34db010a3935678aedc0173d055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:80:57:b6:28:d9:6b:a6:5f:66:a4:c8:aa:
7e:03:09:87:99:c4:68:59:5b:31:c3:1f:e3:e0:4d:
b9:f4:d8:35:1c:9f:dc:c8:dc:8d:25:9f:84:67:0f:
bc:09:bc:be:b3:b4:7c:58:f6:1a:02:a9:24:30:ad:
db:42:bc:2b:20:3c:96:82:7c:6e:94:e9:62:e3:2f:
db:0a:0a:87:93:c5:3f:f4:56:3b:79:2d:f2:35:0e:
e8:2b:8a:da:81:39:8d:91:90:90:55:18:5e:1b:ce:
5f:83:36:85:d8:38:32:64:48:77:c6:a4:34:7c:73:
31:0f:eb:6e:ea:c3:10:46:60:f6:f4:eb:6a:86:88:
9e:7e:75:dc:bf:74:f1:c0:9b:12:ec:77:37:69:f5:
c6:de:0b:28:de:f7:d3:f4:74:6e:01:ea:67:23:30:
aa:77:cd:52:7a:7c:2c:cb:ef:36:0c:30:23:3d:67:
06:d7:80:41:3a:82:33:dc:fc:3e:bb:56:d8:84:d7:
26:8c:1c:ae:35:a8:46:ce:b8:d6:85:17:67:b8:3f:
1e:f0:7d:75:1a:68:28:cc:c8:90:ee:17:9c:6a:e7:
e5:fe:67:49:48:43:a9:a4:a3:14:79:e5:d2:9f:ce:
d7:75:8d:48:61:c3:60:4e:2f:d3:39:a2:63:88:6a:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:C7:6B:06:2D:34:DB:01:0A:39:35:67:8A:ED:C0:17:3D:05:5F
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:03:0d:b9:f7:52:79:b0:7b:be:a1:b6:b2:d2:78:cf:2a:96:
14:2b:09:d8:bb:38:d5:ae:46:45:75:58:77:3d:59:6b:b9:17:
6a:f5:96:56:90:ec:f3:6b:44:cb:be:5d:87:27:c6:d2:70:db:
e1:27:d6:25:99:68:6c:9b:64:83:3b:a6:53:2e:4d:09:d6:bd:
0e:e0:ea:75:eb:da:47:ea:7a:35:98:52:d9:61:08:43:d8:98:
9d:c8:4b:9d:5f:f3:e2:0c:96:cd:31:d9:38:bb:a8:62:9f:e3:
66:ca:c5:87:df:4f:62:90:31:d3:1d:56:5c:c6:de:71:9d:2d:
e1:50:df:d1:5d:19:77:db:ab:78:55:fa:8e:8b:82:f4:70:6d:
dd:96:26:51:56:ac:76:37:73:68:eb:36:9c:00:39:e2:a9:6b:
a6:4c:d9:b0:29:43:45:c2:20:3d:60:f0:b8:cd:e0:6e:03:3a:
be:0f:7d:f9:dd:74:87:4e:6f:86:40:1e:90:6f:61:91:be:4b:
29:38:80:bf:86:57:5e:2d:86:d9:aa:73:e9:78:e7:fb:e5:84:
20:b1:b1:19:e9:3d:1d:c7:6f:45:9d:35:01:12:77:9e:88:27:
75:70:9b:fe:b5:d2:8e:ff:7f:8b:31:d7:b1:7d:f8:3a:a6:85:
09:0c:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:44 2025 by rpki-client