Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: wR2VdjUMo+FDnA9TZFjfiILZ8+Op/gINIWezdr30I9I=
Subject key identifier: ED:3B:72:4C:36:22:97:9A:EC:15:16:2C:68:06:F5:40:48:AB:C7:02
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 0199383917EB67183259FB1B007931A74FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0C44
Signing time: Thu 11 Sep 2025 10:01:29 +0000
Manifest this update: Thu 11 Sep 2025 10:01:29 +0000
Manifest next update: Fri 12 Sep 2025 10:01:29 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=)
3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: lGsJCWwQ4xUtvHWZUmR/wSCq/Rlqt+PTLqwuLAU9j+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:17:eb:67:18:32:59:fb:1b:00:79:31:a7:4f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Sep 11 10:01:29 2025 GMT
Not After : Sep 12 10:01:29 2025 GMT
Subject: CN=ed3b724c3622979aec15162c6806f54048abc702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:fa:89:1d:ba:52:c1:cb:e9:36:47:85:dd:
e1:6d:2d:e2:8c:6e:18:95:28:80:69:05:1f:35:6d:
76:95:52:d7:cd:26:1e:fd:52:27:2e:39:bc:be:41:
77:47:ff:2e:86:ae:60:50:88:70:14:ef:8c:9a:f4:
ae:68:cb:98:73:bb:51:6c:12:de:37:87:14:d9:4c:
31:d4:11:58:3d:08:b8:56:71:77:db:20:d2:11:00:
e5:2f:c8:4e:9a:ef:8a:95:fa:cf:ee:74:ca:db:63:
6a:c5:f6:58:4e:e5:c8:36:0b:be:f1:47:9a:ad:90:
47:54:bb:e6:7c:d7:2a:d0:cc:ef:2b:38:67:31:6d:
66:4f:1a:17:3a:9f:13:10:b8:31:80:f6:38:d5:1d:
41:6e:77:21:7f:96:3c:5b:cf:f2:f7:97:b2:44:f1:
56:89:68:95:b3:d5:1a:e0:40:83:c3:08:0f:22:77:
2d:70:0d:84:9a:4a:3e:2e:5a:9d:e0:ea:1b:74:ab:
bf:69:32:15:e5:df:2b:4d:23:f3:5f:bf:23:20:df:
ff:ec:2f:08:66:a2:75:72:cc:fa:0e:15:f0:81:53:
04:b2:5c:eb:62:ef:15:3f:74:30:59:d1:a5:ae:10:
d0:62:a6:7a:ba:25:fe:8c:f6:47:5d:ec:e0:3b:4f:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3B:72:4C:36:22:97:9A:EC:15:16:2C:68:06:F5:40:48:AB:C7:02
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e7:6d:61:35:1c:a0:0b:15:c9:2b:cb:35:b7:c0:da:08:15:
03:50:d7:95:8d:2c:56:5e:af:43:ef:01:1d:45:d1:c4:be:50:
94:ce:b1:5d:bb:0e:4a:6d:76:bc:d1:0b:0d:1c:e0:67:74:58:
ca:ed:4d:56:c6:ab:f0:bc:cd:be:92:c6:86:83:d7:9f:b8:b7:
18:77:92:d8:f8:1b:f5:83:37:c8:b3:e6:f1:cc:7d:53:53:3e:
36:83:a0:e6:09:e1:c3:42:d0:b4:f5:3c:6e:2d:95:2a:1f:5b:
e1:e2:f5:a9:5b:5d:1e:c3:32:f6:27:b7:84:c2:c5:9c:a5:c3:
6b:d4:71:1d:80:ad:33:06:93:15:b6:64:34:c4:7c:53:75:31:
d3:fa:06:7f:fa:b9:5d:cf:9d:f9:7d:79:e2:e7:eb:33:b3:80:
f5:7a:8a:9c:47:14:59:48:f8:7c:f2:93:d5:5f:ac:c8:77:84:
1c:a6:7d:18:87:d6:d5:3c:67:39:48:34:28:ad:6a:02:64:ae:
f5:db:fc:3e:c3:d6:e0:41:0a:5f:a4:90:8c:ae:14:65:5d:54:
ba:e0:55:a7:33:48:1b:a3:ac:f0:a5:62:1e:b0:58:46:2b:07:
78:cd:7c:0e:4d:8c:92:3a:d6:29:36:f4:07:ff:eb:e1:d8:79:
04:81:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:00:11 2025 by rpki-client