Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: Ap/hlT6eaQWrr68h3569szfJHN4Zw/6E9MijFCNkG7k=
Subject key identifier: 55:A3:45:3C:68:2E:1E:59:0A:5F:90:B7:D7:51:BD:56:9D:04:8F:DE
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 0199172CA386AD365C673296A6BD7E60DA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 00:00:25 +0000
Manifest this update: Fri 05 Sep 2025 00:00:25 +0000
Manifest next update: Sat 06 Sep 2025 00:00:25 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: P2voPSfu/lnjA/nSv1smLJ0SBZr4qN1TYVZCgaTr1Kw=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:a3:86:ad:36:5c:67:32:96:a6:bd:7e:60:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Sep 5 00:00:25 2025 GMT
Not After : Sep 6 00:00:25 2025 GMT
Subject: CN=55a3453c682e1e590a5f90b7d751bd569d048fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:0a:3b:f4:df:c0:1b:52:30:70:2a:53:2c:
f5:99:67:26:bc:93:a9:cb:8a:f2:73:f2:88:41:fb:
80:cc:81:ae:da:ce:c2:cf:83:eb:99:83:50:12:27:
03:92:9c:04:ba:16:47:a0:26:2b:5b:cb:c7:cd:3f:
f0:a0:ba:b5:8e:b3:77:ff:20:c7:f8:83:45:92:f5:
3e:76:e3:15:3b:29:a8:2b:58:05:72:2b:71:d8:fe:
3e:eb:68:95:03:76:be:27:9a:4d:d4:55:bf:cf:1a:
04:cd:5d:7d:42:ca:a2:37:42:bf:51:ec:3a:0e:af:
36:d1:a9:8e:28:00:3c:c0:ac:20:33:4e:1a:37:a3:
bb:ea:05:d7:fc:e2:c6:1e:85:3d:94:ed:f0:fb:93:
54:3a:c4:45:5e:6f:18:0a:8e:56:21:31:c3:1f:08:
a8:6b:8f:44:1b:2e:eb:3a:14:d7:a0:a4:8a:31:8f:
b9:c4:b7:9b:a5:8d:93:2e:15:e0:cd:59:d5:a5:5a:
92:e5:6e:35:d7:48:95:3a:05:38:e6:6e:81:12:f8:
03:77:9f:d9:6f:a4:d4:a2:bd:cf:ca:67:70:00:36:
14:6b:2a:fe:b9:66:c0:a7:dd:a8:4e:d8:18:41:fa:
3c:dd:55:f5:78:35:1d:2f:55:ff:63:e8:f9:f6:8c:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:45:3C:68:2E:1E:59:0A:5F:90:B7:D7:51:BD:56:9D:04:8F:DE
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:2f:87:7f:71:8a:95:1c:4c:75:6c:3e:17:78:a9:63:81:
07:b0:f6:08:47:84:87:ac:dc:e1:ec:91:d2:ee:b8:66:d7:60:
bf:84:5f:5f:f8:af:79:44:67:0e:4e:64:e8:b2:a6:40:88:26:
47:e6:14:1c:e8:9a:04:40:f4:1f:aa:c9:42:eb:27:9f:32:32:
a3:86:6e:aa:04:84:16:19:99:8d:6f:d6:33:19:59:9d:8a:01:
28:bb:0c:07:d2:8f:b3:9b:ed:63:74:fd:9b:6f:73:5a:00:ef:
a0:03:dd:63:79:9c:9c:a2:db:bb:0f:94:a1:0e:df:7f:87:1e:
03:8f:a2:a0:d7:ab:7d:e2:f8:d3:2b:9b:53:e4:bf:57:a1:71:
71:6b:7a:b5:1e:88:7f:6c:76:fa:12:bd:4e:dd:13:00:43:74:
37:bb:0c:5a:df:f3:2a:bf:6d:69:0d:4d:90:a4:80:de:2b:c2:
52:b6:57:34:1c:c5:a1:88:bc:81:60:e5:a5:5f:2c:c8:a0:eb:
14:5c:24:62:7c:4c:ae:e1:26:23:e0:64:81:f5:6e:2e:21:d0:
c8:03:59:dd:b7:c0:fe:8e:b6:fd:bf:38:ab:d4:90:c8:a4:2a:
42:57:99:39:33:26:99:72:4d:1f:e3:8a:89:d2:f0:8c:b9:41:
2c:37:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:27 2025 by rpki-client