Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: 92JZA6GaFIGIqd0zFnS4fGi6HPQsE2CgSR6GBYFuu2o=
Subject key identifier: 16:D1:3B:32:4B:90:15:38:FD:13:DF:29:1D:4A:73:F5:92:02:0C:99
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019939B980708A5D1D9CCA6355ED4CF3B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 0F50
Signing time: Thu 11 Sep 2025 17:01:22 +0000
Manifest this update: Thu 11 Sep 2025 17:01:22 +0000
Manifest next update: Fri 12 Sep 2025 17:01:22 +0000
Files and hashes: 1: cXNS-jhbDVvMG8hSqbBOLCvMoSQ.roa (hash: ttyMv3492QrBBmeGVtvaGpTbwOtDA0bKvFjMI/PqMtk=)
2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: G0B2fysVGsYcB0dn2eRXWt6MuY9URzsHRUSP5Cvzirc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b9:80:70:8a:5d:1d:9c:ca:63:55:ed:4c:f3:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Sep 11 17:01:22 2025 GMT
Not After : Sep 12 17:01:22 2025 GMT
Subject: CN=16d13b324b901538fd13df291d4a73f592020c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:7d:c0:ee:1d:73:00:dd:81:39:af:29:24:
dd:c0:ce:0a:c1:2a:bf:06:d3:75:aa:3b:6b:47:6e:
26:43:c6:41:b5:08:34:7c:c3:d0:82:52:f6:90:47:
24:95:1b:21:1c:eb:65:31:cb:f3:b3:96:cf:10:e1:
2c:c3:9f:b1:96:2f:9a:6c:38:5b:20:91:bb:32:eb:
fd:1e:77:53:ca:df:f2:76:ae:36:42:07:27:75:50:
ea:f2:94:1d:49:00:16:a6:a1:ba:2e:8e:15:62:8b:
23:4a:05:60:63:6d:c2:7c:fe:22:e9:22:50:0d:75:
c7:f3:75:4a:88:f2:75:e1:74:fc:12:54:54:9b:39:
d1:ef:0f:f0:39:dc:90:60:ef:ab:a1:3b:ae:de:8a:
2b:c2:0d:cf:40:41:95:9a:6c:48:8b:18:65:6d:7f:
31:e5:d4:83:d9:47:af:e8:e9:d0:60:39:c5:25:f5:
da:cc:f2:25:29:24:01:66:45:39:a9:a8:87:10:d9:
26:c0:d1:96:37:b9:b4:e2:14:4d:ad:eb:33:13:b8:
1d:2b:38:33:c0:76:08:d5:f4:4d:36:f8:cf:78:49:
40:bc:7b:12:a4:3f:18:dd:ef:45:31:2c:35:89:df:
95:64:68:52:ca:f9:b7:4e:e2:55:b4:87:7f:ce:62:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:3B:32:4B:90:15:38:FD:13:DF:29:1D:4A:73:F5:92:02:0C:99
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:7e:e8:d9:d9:62:c2:a9:9a:1c:a5:ff:8b:36:ac:ea:9a:
c4:45:f0:1a:d5:84:33:2e:3a:dc:31:8d:0f:3f:7d:b7:5a:0b:
c5:f5:a6:73:00:ce:8f:91:2b:e4:25:84:47:41:82:a8:bb:d7:
d2:8b:c6:86:9d:db:c3:08:84:21:68:37:45:e8:e5:98:b4:29:
d8:77:b4:00:9e:ad:af:12:eb:44:b2:c2:46:be:d8:31:2c:8c:
0d:73:87:5e:cb:7c:fa:13:ee:05:13:f8:c1:10:28:6c:82:ce:
39:be:a3:bb:82:3f:53:96:ca:d8:92:0e:6f:6c:f8:86:9a:44:
68:12:31:24:de:48:2c:14:29:a0:7e:a2:59:f4:92:13:c8:d9:
f2:6d:20:b9:0e:46:5f:51:e3:43:11:1e:d2:c4:ce:a0:2c:5b:
c0:69:8c:ef:28:73:38:50:86:d1:db:cd:b7:50:d7:5f:32:ed:
bd:aa:00:30:38:00:06:34:19:53:9e:4b:52:60:ee:c5:f1:9b:
bc:80:36:29:84:be:4e:39:fc:ff:0a:5f:9b:55:9d:5d:ce:1e:
d3:11:88:89:0c:2f:75:57:7e:04:c4:bd:6c:69:42:04:ee:0b:
fd:86:78:79:e5:03:ac:8e:1d:c9:3d:e9:e5:47:7e:27:62:43:
37:55:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:14:00 2025 by rpki-client