Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: U+D3AVvU+71mixOYCTU2ZrgX8QwZ330C+yy7wQnIqY0=
Subject key identifier: 0F:41:72:B3:7E:E9:FF:C5:9F:D4:6C:1E:C2:71:D8:95:ED:56:D1:98
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 01984965523041110933F91C178E32DD911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0D32
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: tHtk4NH/FYVXUu8rLvS/oAtB7CIEY1jr2ORcU61Af80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:52:30:41:11:09:33:f9:1c:17:8e:32:dd:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=0f4172b37ee9ffc59fd46c1ec271d895ed56d198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:08:eb:07:4c:b8:6f:41:e4:25:15:46:47:
1a:f3:c1:f2:2c:39:97:4c:0b:d4:68:ad:4f:01:21:
f4:85:55:be:8f:45:ea:15:80:1b:2f:e5:21:68:1f:
71:d2:76:42:55:82:14:54:f9:fb:4b:06:3e:6f:21:
9c:ff:11:a6:1d:3b:c8:f9:9d:0b:d0:40:72:f2:f7:
17:2e:6c:95:59:c9:85:6b:6c:51:35:7c:72:f9:63:
79:8e:6a:9c:a7:ba:92:86:e4:0c:17:a7:7b:ad:20:
d9:12:80:30:24:72:99:d8:14:4c:cc:3b:9c:c6:8f:
99:ad:29:7d:2e:a9:96:a0:f6:d7:bd:d6:12:76:67:
1a:1e:fa:6d:8d:dc:13:c9:49:fc:97:12:1d:52:19:
b5:77:ef:c1:0d:20:b9:98:1e:28:3b:40:a2:58:21:
c4:bf:85:fa:5d:30:cb:6f:7e:27:15:c2:22:04:b2:
3d:fb:83:f3:a0:6c:c0:9d:a1:7a:f1:dc:e2:32:16:
a2:cd:61:6b:00:f8:ce:44:a1:2d:ae:7e:bf:aa:83:
ff:58:0b:d0:16:d7:c7:6f:a8:c9:76:13:bc:c2:80:
cb:4c:ab:f4:1b:7a:0e:48:34:72:2c:58:10:8d:13:
28:32:74:bf:fd:cf:dc:56:54:3c:aa:8b:d3:e0:52:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:72:B3:7E:E9:FF:C5:9F:D4:6C:1E:C2:71:D8:95:ED:56:D1:98
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:92:4c:98:f3:ee:f8:c1:7e:de:79:86:1d:6e:9c:94:76:
44:d2:15:0b:9e:e8:4f:dd:84:2f:12:c5:ac:94:ba:f1:16:61:
ff:fc:5f:1e:b9:8d:24:70:2c:0e:48:92:7b:f2:6e:49:9c:e7:
74:f3:1d:4a:fd:e7:18:14:41:01:f7:f1:97:00:28:69:8a:63:
d8:e0:d4:8e:20:a2:71:6c:11:7b:9f:4a:d3:05:6b:0e:2d:a7:
46:e0:89:b4:d5:68:da:a1:22:6b:8e:52:85:ca:d3:c7:37:e6:
1c:38:80:e6:22:a4:21:f5:b6:48:c6:5a:df:da:af:d8:db:58:
05:5c:67:31:2c:66:d5:52:a2:4d:95:f2:2a:75:bd:35:18:83:
06:f9:2f:59:ce:50:26:35:fa:c6:de:8c:c5:27:5e:65:21:78:
94:00:f6:94:76:45:51:d5:c6:eb:82:c5:82:b7:7a:ef:c1:a6:
7a:28:07:01:6e:2c:ce:c2:2c:9c:e9:30:7b:6c:03:dd:5d:68:
ee:c7:8f:a5:85:2e:85:f3:8b:4e:5f:5c:52:c2:ff:74:ab:aa:
80:2b:bb:16:b8:60:7a:7d:2b:81:7b:c2:da:08:5a:a4:59:eb:
29:98:08:1b:2d:70:d4:52:8a:86:20:8d:42:cc:e8:88:5b:5d:
f8:5f:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:48:34 2025 by rpki-client