Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: V+2lv3xnBco1S1BmRqSv7brbjp7rvtAR4HiicSV1c8k=
Subject key identifier: 8B:D5:A6:A6:29:77:E0:EB:C4:E5:70:49:86:CA:92:CA:9B:C2:2D:EF
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 019846D1F505A3B725D7C793BFA3D297894B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0CD4
Signing time: Sat 26 Jul 2025 13:00:21 +0000
Manifest this update: Sat 26 Jul 2025 13:00:21 +0000
Manifest next update: Sun 27 Jul 2025 13:00:21 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: jlheA9zLVV0uy8TiWlro7x2xNCeBS9Kno7t2IEfa3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:f5:05:a3:b7:25:d7:c7:93:bf:a3:d2:97:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Jul 26 13:00:21 2025 GMT
Not After : Jul 27 13:00:21 2025 GMT
Subject: CN=8bd5a6a62977e0ebc4e5704986ca92ca9bc22def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:1d:d6:24:1f:34:a8:fe:78:d0:d9:45:20:
4f:f2:46:4f:af:21:5e:6b:7b:a9:ce:ab:56:fe:35:
12:d9:ca:2c:dc:2f:b1:80:5e:cb:12:31:73:9f:eb:
fd:0f:77:b8:c2:a9:0f:cd:63:62:99:46:ce:eb:3a:
1d:ee:a0:e5:ee:7d:ca:1a:10:f0:15:16:fd:b8:22:
8e:3b:b8:12:ec:f0:d4:c1:38:14:4a:99:9b:29:34:
17:d9:30:00:f8:0a:11:56:7d:2b:26:6a:e3:ec:89:
5c:ca:16:87:bc:9a:ed:2c:96:ae:6d:06:e2:a9:91:
0d:5f:8f:c2:41:61:7a:1a:e8:9c:e3:92:b7:cb:3d:
0c:4c:4f:03:f5:00:ea:34:c1:c8:30:a3:e8:dd:9b:
11:9d:5c:14:12:ff:3c:26:74:51:8f:e0:ed:31:3b:
f9:cb:69:72:42:5f:bd:f6:7c:c1:81:5a:6d:36:cc:
8b:82:fa:36:0c:72:3c:8a:24:f6:99:26:1a:ac:6c:
91:1e:68:57:ef:a6:33:26:85:73:61:d4:3f:b8:af:
41:d3:e9:a4:77:e4:94:c9:1c:b7:75:21:24:47:e8:
bd:25:3a:7a:c0:d6:1c:68:48:66:2c:9d:70:79:eb:
77:58:36:95:8a:75:b5:af:f8:a6:36:56:18:23:02:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:A6:A6:29:77:E0:EB:C4:E5:70:49:86:CA:92:CA:9B:C2:2D:EF
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:88:d9:31:69:c6:ce:88:ea:9e:8e:8b:60:44:06:39:34:6f:
ad:fc:c7:e4:ab:9b:83:74:3d:e3:b6:40:36:ec:25:7d:61:5a:
8e:52:2b:ec:84:22:42:e2:50:0f:b1:eb:8a:49:51:33:37:c9:
b0:eb:2a:bd:13:c7:bd:a3:2d:1b:24:57:2f:5f:78:87:03:8f:
b3:5f:57:5a:09:f6:10:09:3f:dc:65:04:6e:84:4e:2b:5a:f5:
4b:59:ed:80:30:e1:67:b4:f8:e3:cc:df:e7:52:67:1d:75:b8:
ae:f2:8a:a3:57:85:f5:ea:78:0c:23:25:85:97:4d:76:af:09:
b8:5c:c3:27:1c:f2:9e:34:17:d9:a4:65:52:05:93:fa:0e:de:
79:18:e3:95:5f:38:79:ba:55:86:a4:7a:c3:af:3e:84:34:31:
ed:d2:ba:06:0a:6a:a2:a4:0e:34:f1:93:d8:ab:5c:9b:8f:98:
bf:ae:cb:93:c0:6a:70:37:35:09:1e:87:27:5c:65:d3:ac:43:
97:90:dd:23:a1:1c:23:21:54:15:5e:ee:b6:67:93:17:c0:6a:
ec:69:1f:2f:94:4b:2d:b1:d6:d2:40:97:a2:fb:46:70:d5:00:
ec:6c:23:e3:45:38:79:0d:a6:13:00:89:76:7c:5a:4a:a9:9c:
06:c7:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:46 2025 by rpki-client