Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: QlYcXgHPWhUqYXXH3rdVVpcEE+9Vzf+HdRbGt3O+61A=
Subject key identifier: 30:EE:F0:4F:FA:AF:C7:44:EC:B4:60:72:F6:73:EC:C3:9B:8A:25:C7
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019922FA31FDF3D08E907175A7ECCD2CFE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: NCYeE8GqtrLGkf3PYury6RBM5EKj34NiKoa9CO7deeU=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:31:fd:f3:d0:8e:90:71:75:a7:ec:cd:2c:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=30eef04ffaafc744ecb46072f673ecc39b8a25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:ff:3f:65:09:70:40:d5:81:3b:38:4f:11:
90:9c:b6:3b:72:81:fd:64:00:d2:fd:bf:c2:bd:76:
33:9c:f3:b0:de:db:83:f3:1b:0b:9d:f6:41:b7:3f:
09:db:09:6e:50:64:fa:85:81:a2:3b:6f:2e:24:c4:
4c:5b:2a:53:81:42:12:68:fa:c5:4e:78:7f:bb:ed:
e1:d0:81:5c:5f:84:2d:32:e2:28:ae:78:bb:5b:ef:
31:f4:9e:c6:94:39:2e:8e:af:a7:69:af:29:e8:89:
f2:04:ba:9e:8f:cd:e1:88:9a:0b:ae:b0:12:5e:b1:
9f:91:08:64:8e:c1:eb:76:e2:ad:e6:3f:6c:7c:ca:
22:91:eb:b4:b6:79:0c:07:ad:4f:7d:2e:d5:46:2a:
dd:d9:53:8e:5f:eb:76:21:34:43:2a:15:b4:0b:54:
ed:5e:a1:7c:13:2b:d9:ad:7d:7c:fa:82:28:14:e7:
f8:28:a4:2d:6b:42:6c:92:08:0d:56:66:cb:54:7b:
8f:fc:4b:09:64:30:d8:36:2f:7e:a2:36:05:25:c1:
16:1d:98:4a:54:ec:b6:95:a9:f9:fb:ad:4f:46:fa:
8a:49:55:c9:68:dc:5f:7b:37:ab:ef:54:05:f2:92:
b5:b9:56:28:5c:86:88:cb:64:08:ec:45:49:30:af:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:F0:4F:FA:AF:C7:44:EC:B4:60:72:F6:73:EC:C3:9B:8A:25:C7
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:f8:fd:b5:e9:e1:74:14:3f:bc:90:c4:0c:74:ce:57:6d:9a:
7c:2d:4a:07:cc:9f:5c:23:3d:a3:a9:7b:8a:0e:01:47:ed:b1:
d0:80:89:fd:49:b9:89:34:c7:41:bc:c8:e9:5b:94:31:2e:c2:
aa:70:23:d2:95:6f:83:fb:2f:93:3d:b9:4b:86:af:db:db:6d:
c5:f7:12:3c:32:ff:9c:3b:3f:3b:60:2f:0c:04:a5:2f:02:a9:
cc:1c:25:c9:6e:73:bb:f7:3b:b1:85:77:5f:53:1f:65:f0:b6:
99:2b:23:86:21:a1:c6:8a:62:94:c7:24:c4:75:2d:eb:48:d4:
14:12:f6:9b:7f:83:51:7b:45:6e:33:ce:8c:60:45:ae:8e:ff:
e7:ce:63:28:d9:99:ed:68:94:5f:6a:2f:7e:82:bc:d9:8d:49:
3f:da:fc:8e:18:84:5d:dc:4b:c6:87:88:b6:39:a8:80:b3:ed:
49:46:22:b7:fa:2c:d1:77:86:8b:0f:e0:6a:48:ae:f1:7d:35:
87:9c:86:90:f5:ad:70:16:83:bc:03:7d:c7:79:47:69:74:83:
5f:2b:a6:9d:b0:09:49:8f:80:f4:40:63:ff:4d:21:5f:be:c1:
86:87:bf:63:ed:30:ed:de:52:f2:ef:40:45:37:bc:90:ce:17:
88:5e:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:06 2025 by rpki-client