Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: IO4alvSSm3Gx4Kzwu5/NeJXVlp3WfvUgEJuT9Lag6vc=
Subject key identifier: E2:97:4A:9F:5D:59:2C:84:9F:26:FD:FD:19:96:51:83:E1:45:5C:3E
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019842F5BBE0189EC6A70030C50B6A0F8E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 072E
Signing time: Fri 25 Jul 2025 19:00:57 +0000
Manifest this update: Fri 25 Jul 2025 19:00:57 +0000
Manifest next update: Sat 26 Jul 2025 19:00:57 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: POEiAGdE8YO3d3NY/4kQ9OhCOQm+TPV+Hzd8p8UyQ9Y=)
2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:bb:e0:18:9e:c6:a7:00:30:c5:0b:6a:0f:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Jul 25 19:00:57 2025 GMT
Not After : Jul 26 19:00:57 2025 GMT
Subject: CN=e2974a9f5d592c849f26fdfd19965183e1455c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:a5:43:d6:7e:00:a6:b4:53:4f:17:88:02:
5f:b5:46:ad:a3:f5:93:f4:b9:2c:61:fe:31:86:78:
71:ce:92:83:90:a8:43:f3:0d:63:fc:10:2d:87:03:
ab:91:70:1e:3e:c4:03:b8:93:b2:b5:78:d6:7f:6e:
e7:77:9a:8c:80:9b:d4:c2:ee:f7:5a:5b:d9:38:22:
da:2e:01:9c:1d:77:5f:4c:8c:d3:6d:bc:16:6e:80:
6a:5a:fe:af:d4:df:17:da:5d:3c:c2:4f:68:45:fa:
c0:56:18:45:bc:ef:fc:2d:39:22:7f:eb:74:8d:eb:
29:84:cf:1b:80:9e:3c:1d:de:b0:dc:fa:ee:6e:27:
51:e3:4e:56:9d:ca:24:2c:df:44:06:8d:38:6c:15:
c4:7c:ca:80:59:53:36:0c:f9:cf:c8:58:f8:24:7b:
49:2c:08:2b:ed:3d:a0:cf:5b:f1:fa:40:4b:9a:aa:
8a:cd:d6:24:0a:cf:25:01:2e:1f:32:5b:e7:f5:fb:
f3:83:1c:59:6b:fc:ea:7a:cc:29:c6:77:e1:4d:b9:
5d:29:d8:9b:82:61:51:6d:4f:9b:e3:2d:26:95:6b:
de:ea:2b:84:00:22:2f:62:46:1a:c6:6a:df:82:fa:
fd:8b:d2:94:0f:2b:4f:82:cf:2f:c8:c3:a2:d7:ba:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:4A:9F:5D:59:2C:84:9F:26:FD:FD:19:96:51:83:E1:45:5C:3E
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:c2:4d:12:2e:9a:bd:d8:ce:d4:7c:ca:97:e2:68:45:cb:
93:98:11:5a:85:48:97:da:f4:8b:e9:e3:77:63:b3:7b:db:22:
ec:1b:cc:11:b9:eb:6c:4c:23:e3:4b:99:1d:2c:f8:b7:0a:07:
6b:54:05:b3:43:8e:0e:6f:ee:6c:dc:80:24:ea:52:bd:44:08:
5d:a7:e0:de:a2:f2:d0:aa:b0:74:cd:f9:86:6e:83:5f:7b:5d:
36:f1:24:de:41:e3:f5:64:02:86:39:39:0e:fb:49:4d:0e:87:
60:67:19:25:15:37:7f:6f:67:5a:99:0f:d0:75:0c:3a:0a:56:
c7:dd:b1:35:ad:9e:03:00:77:32:e6:a3:e5:39:2f:49:17:2c:
c5:f0:3c:eb:44:df:00:78:35:51:da:0b:4d:61:1d:60:33:df:
4f:69:9e:a8:d1:8d:7d:3c:0a:11:60:d7:48:b3:ff:8c:4f:e0:
ee:04:5b:0a:68:9d:ae:06:fb:e2:55:15:a2:8b:26:cc:9a:18:
3b:13:68:48:69:f7:f9:50:60:96:f8:36:d4:2f:20:aa:86:46:
39:85:67:69:49:ab:bf:28:0d:9a:69:bf:1e:17:67:de:72:4c:
bc:19:d8:c0:fe:02:24:32:b1:24:0f:12:4f:4d:d6:5e:1d:52:
09:70:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:57:11 2025 by rpki-client