
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
File: _dpVEEhBC7XEfr24O_WBiMSjBrI.mft (raw, json)
Hash identifier: /5/7YtJbhG3Tpb1gXGu+o9W9Gfirx6JxOAclKxLDWdg=
Subject key identifier: F0:28:8D:91:2C:98:62:15:88:92:1E:97:D2:AE:4A:6E:9A:33:A3:15
Authority key identifier: FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
Certificate issuer: /CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Certificate serial: 0199221E30D288EF597317C865F29E301DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
Manifest number: 24
Signing time: Sun 07 Sep 2025 03:00:27 +0000
Manifest this update: Sun 07 Sep 2025 03:00:27 +0000
Manifest next update: Mon 08 Sep 2025 03:00:27 +0000
Files and hashes: 1: BBKJGvg1eMQWu4Dn8KcuHomKhy4.roa (hash: ZhbL/bOWkEXevzCvZ62AQyku+99vuUelC20ZFee2QwU=)
2: _dpVEEhBC7XEfr24O_WBiMSjBrI.crl (hash: iplTtYBwsqu8VJgpZLY3CEaIFYxTSEYSCV7TZzwdSAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:30:d2:88:ef:59:73:17:c8:65:f2:9e:30:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Validity
Not Before: Sep 7 03:00:27 2025 GMT
Not After : Sep 8 03:00:27 2025 GMT
Subject: CN=f0288d912c98621588921e97d2ae4a6e9a33a315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:b3:00:e5:65:3e:ce:94:77:7f:6e:34:66:
1c:ff:35:d0:52:fd:7c:c9:fd:a5:48:06:30:1b:f1:
33:93:50:31:7f:19:e7:50:c8:14:5d:34:28:4a:56:
6c:11:ef:3b:15:d3:ae:35:f2:84:47:8d:a6:67:b9:
d7:49:a7:62:19:45:ae:b6:48:71:4f:8f:15:24:c4:
6b:36:74:aa:1a:7d:5d:37:25:a8:96:66:d9:33:b1:
d1:68:ee:17:fb:11:c5:07:e5:3e:95:90:04:a6:9f:
c7:b1:79:b8:d1:c4:c7:c3:91:9e:75:d1:ef:8f:f1:
35:73:ba:c4:e9:e2:ce:7c:a6:dd:c8:01:e7:9e:84:
36:1d:5c:56:a2:48:b5:ce:d6:6f:31:e6:ae:d0:de:
ab:4d:97:47:af:7c:19:69:c1:ca:31:2d:c0:28:cc:
d9:c1:49:f7:32:fa:84:bb:f5:83:8d:3f:1b:b1:aa:
a0:90:fe:f6:9b:56:50:c3:4f:1b:a9:f5:c4:6d:b0:
67:01:1d:5a:b9:6e:51:66:b0:b7:82:3b:f9:73:c8:
9a:90:c7:bf:8f:70:c6:93:8f:25:27:08:22:e5:53:
f5:5f:ca:87:66:c0:c7:43:6c:68:ae:09:bf:57:f8:
79:bc:39:87:09:e8:b0:fe:9e:83:6d:50:d5:14:c6:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:8D:91:2C:98:62:15:88:92:1E:97:D2:AE:4A:6E:9A:33:A3:15
X509v3 Authority Key Identifier:
keyid:FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c1:aa:c2:4f:d0:77:d5:f6:af:94:1d:c7:3e:21:3d:f2:78:
b9:d1:64:24:7f:06:bf:88:ff:7e:ad:1d:1f:0c:cf:4a:e1:00:
1a:8c:c7:a6:8d:db:29:98:2d:41:ce:1a:b1:60:a4:d2:13:d4:
ae:46:44:50:78:67:25:2a:85:ab:47:b6:81:3f:e7:ad:a5:99:
1b:f8:eb:c2:07:c8:cc:ef:03:cf:ab:ba:30:01:a6:5e:4d:c5:
6b:1b:b0:c4:25:b3:9a:a0:62:f8:44:e8:f1:ed:4d:6c:e2:5d:
1d:d2:04:0e:14:ac:4f:c5:4e:bd:e8:84:35:cd:c5:5c:e2:1e:
6f:17:4f:13:93:61:63:38:c5:8d:23:e6:9a:2d:5b:c9:b2:3c:
41:ea:90:9c:64:43:b8:7e:02:62:99:44:35:c0:1c:8c:5e:e4:
4c:e9:fc:27:79:38:ea:db:81:82:a3:c5:c7:fe:ba:1f:07:52:
ab:a8:70:4c:9e:25:77:f7:ba:a9:37:e8:8a:a6:dc:10:69:87:
fb:00:2d:6e:ad:d5:4a:a1:30:d7:ff:a9:c9:f3:b6:a6:a3:d1:
54:12:ce:22:c7:d7:e3:eb:92:26:70:2e:50:b2:de:54:c3:c8:
6c:51:04:c1:48:86:a7:90:0c:66:c4:7d:73:23:48:d4:6d:88:
a7:4b:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:44 2025 by rpki-client