Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File: dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier: YFzj5juzC633036yGJ1ecSTYgkwWNPcvuSEwMehf7vs=
Subject key identifier: 65:AA:C0:40:EA:98:01:69:A3:1B:5C:2C:0C:B6:D1:A6:50:52:1D:6B
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial: 0199225552B4C8FBF2FE1123CCF37815B01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:40 +0000
Manifest this update: Sun 07 Sep 2025 04:00:40 +0000
Manifest next update: Mon 08 Sep 2025 04:00:40 +0000
Files and hashes: 1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: 8K+J1kMwe2G7n843w9dzcaFlnEvNrRJvwUsuSKDI454=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:52:b4:c8:fb:f2:fe:11:23:cc:f3:78:15:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Validity
Not Before: Sep 7 04:00:40 2025 GMT
Not After : Sep 8 04:00:40 2025 GMT
Subject: CN=65aac040ea980169a31b5c2c0cb6d1a650521d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:f8:cf:52:48:29:6d:6b:bf:f5:db:eb:eb:
97:f5:5d:a9:b7:b4:7f:b1:07:50:3b:c8:0e:ea:70:
5a:00:d2:0b:99:8a:29:09:14:13:0d:85:09:e9:a8:
c6:52:4d:6a:6c:3a:6f:8a:d0:0c:58:b9:ea:66:66:
97:58:a9:9a:cb:f5:89:00:32:5e:ce:56:0f:01:1c:
ff:fa:03:33:71:07:d5:36:93:78:87:bd:b4:13:44:
d7:1d:c2:9e:bd:8a:35:2b:96:34:f7:d9:94:7b:ec:
e9:b0:a5:30:94:c6:21:69:a9:0f:ab:ac:d4:5a:74:
91:03:98:93:6b:31:dd:a2:2c:26:b2:4c:ea:e1:e0:
e9:f5:f1:68:44:e2:f7:36:ae:d5:70:26:23:42:4e:
6a:94:a2:7e:35:8f:45:2f:b4:87:ca:42:61:54:d2:
a7:3a:0e:82:39:cb:48:e1:1f:be:76:d7:e9:56:f1:
5e:25:92:da:aa:5b:19:b8:cb:85:8c:e6:be:2a:14:
c8:46:ca:a7:1d:48:cb:75:25:34:b9:2b:d5:7e:9e:
c8:0d:66:cc:a5:2d:9a:cc:33:92:4f:22:43:b4:84:
c8:93:27:06:f7:7a:99:78:4c:c4:62:eb:50:41:b4:
29:d7:ea:4c:41:bb:47:19:dc:20:ac:ab:90:c6:73:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:C0:40:EA:98:01:69:A3:1B:5C:2C:0C:B6:D1:A6:50:52:1D:6B
X509v3 Authority Key Identifier:
keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:40:a6:65:bf:27:87:46:78:b9:5f:e7:37:ab:4b:8b:59:03:
e8:0f:2c:f2:b2:0c:36:94:d2:24:27:46:d6:b0:1d:c1:31:13:
2d:07:78:2e:e6:91:6b:f5:a5:74:66:13:ec:24:dc:26:d1:7b:
4f:b9:cd:b5:ba:60:42:c5:24:60:a7:01:a3:25:67:29:b1:55:
68:54:2f:07:45:87:f3:f5:48:ce:a2:85:c9:6b:34:3e:c0:20:
cf:0b:33:36:d6:0d:0d:ce:81:26:9d:5e:b5:fc:b7:c8:f5:60:
16:f1:a2:8a:8d:cf:73:24:79:5e:85:bd:77:bb:4b:ff:e7:eb:
b5:4c:aa:9b:2e:dc:0f:fe:bb:c3:3e:a8:09:01:34:ba:a8:f8:
a3:d8:cc:ee:e8:3e:a7:14:0a:ca:19:86:ff:08:60:62:b3:a9:
96:b6:c4:e6:0d:af:22:a7:8a:68:32:19:dc:d0:ee:79:e5:ec:
88:6d:ce:c2:a0:d3:eb:a1:ca:ba:a9:59:d6:ab:c3:18:94:fc:
e7:17:be:53:51:75:1c:a7:90:03:c7:b6:68:62:2c:e7:7d:e4:
f4:db:32:ec:d6:df:12:78:7c:e4:14:4d:90:3a:d9:e7:3f:d2:
0a:40:a6:65:8b:df:ca:a7:09:f2:17:9f:14:e8:ea:fb:bb:b2:
fe:cb:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:12 2025 by rpki-client