Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: w/8v9qcW9TeUtjopCvavoLXrY3h0npZhy+aeVbyiPsU=
Subject key identifier: CC:6F:E8:7F:0D:67:D9:1E:AE:E8:13:53:D7:1F:1B:2D:28:C3:01:5C
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019849669F3139A48D3B02DE74E8F38FF8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0C99
Signing time: Sun 27 Jul 2025 01:01:58 +0000
Manifest this update: Sun 27 Jul 2025 01:01:58 +0000
Manifest next update: Mon 28 Jul 2025 01:01:58 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: g9xiBvKWsG2fQaHkH5ca1f90H2IADeOL449NEveDtpk=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9f:31:39:a4:8d:3b:02:de:74:e8:f3:8f:f8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Jul 27 01:01:58 2025 GMT
Not After : Jul 28 01:01:58 2025 GMT
Subject: CN=cc6fe87f0d67d91eaee81353d71f1b2d28c3015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:d6:29:fb:a5:4e:f9:30:f3:5f:6b:29:99:
83:ee:b2:e9:4a:3b:82:47:b0:00:8a:67:e3:d7:6c:
57:72:99:38:5b:d6:59:38:f1:9c:20:a0:20:3a:28:
08:81:21:19:7d:fe:09:a2:61:eb:da:d8:a3:7c:be:
5a:0f:cd:fa:77:07:50:98:da:38:a6:40:2f:2b:89:
a5:e9:5f:bb:5e:95:6a:b1:ff:5b:2a:33:5f:f7:9f:
f0:40:91:b3:cf:71:4c:af:41:70:a4:bf:02:5f:98:
3c:46:ac:84:17:9b:7a:c9:e7:5d:c8:9d:a5:85:09:
a8:81:88:71:df:e9:5e:e9:89:a4:ce:69:7b:4c:e7:
91:9b:3c:9c:a1:78:76:5d:60:10:f9:46:c1:89:e2:
04:6f:cb:50:09:39:df:43:d0:79:4b:e6:ea:bd:c2:
ed:75:c3:58:ee:1e:b7:c5:e4:79:d9:25:5f:cb:a7:
45:68:5b:e0:12:25:a2:96:34:14:e2:fc:d1:98:41:
4b:89:73:6d:49:82:1e:f4:90:e9:34:d8:80:10:81:
b3:f1:5f:40:a1:29:fb:73:b1:50:bf:fd:78:2c:3d:
51:e5:31:17:83:f1:b0:4d:d4:fe:90:d3:04:ed:69:
15:bb:fc:97:1d:62:ad:84:b9:96:49:2b:dd:65:a3:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:E8:7F:0D:67:D9:1E:AE:E8:13:53:D7:1F:1B:2D:28:C3:01:5C
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6b:b0:6c:f5:1c:ec:b4:aa:fe:32:7e:df:38:7f:df:ab:ce:
95:2d:c2:c9:da:cd:52:9e:a1:bb:b5:63:09:cb:35:a5:64:83:
da:ce:6a:d5:12:a2:53:20:21:f8:3a:6b:4f:82:9d:a6:fc:00:
b5:54:f9:39:5d:df:64:34:f2:81:36:35:85:fe:bd:56:2f:cd:
ad:b1:06:5b:00:c1:bf:9c:0f:86:90:25:6a:5f:fe:40:35:8a:
a0:b1:ff:69:6d:cc:1c:1d:ee:b6:e6:2c:3e:2c:53:44:b2:67:
a8:45:04:05:51:8c:6b:8a:2c:95:a8:39:a1:c0:7b:6d:25:fc:
11:0a:d7:7c:69:69:0e:d1:66:ea:b0:2b:34:f8:1c:6e:a2:87:
0f:51:e1:7a:13:01:07:25:1f:d1:c6:46:e8:70:1f:30:de:24:
14:ce:87:80:55:e6:05:9f:ad:db:e7:e7:02:b0:3e:44:f8:ee:
ae:84:0c:6c:e7:e2:be:c1:72:8f:c7:04:ff:12:d8:06:99:7a:
bf:d5:ea:d8:fb:8d:b5:57:e0:1b:66:38:62:97:f3:e4:19:93:
8d:cc:82:d5:ee:aa:f5:be:87:05:eb:98:24:aa:9d:f9:38:d4:
35:ab:e4:eb:4d:66:1c:ad:f5:84:25:a2:76:41:30:9e:59:6d:
b1:a8:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:51 2025 by rpki-client