Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: 20PrPvg68K1qNdRrrjl9khJiY3f2mHyAFT2vl0VfLdE=
Subject key identifier: 44:F5:BA:A1:B3:A9:BB:9A:66:0A:AD:F2:0F:EB:3C:86:98:CC:32:3E
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0199228CC9BF7BA07B8DECB58AEFD64B1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 048C
Signing time: Sun 07 Sep 2025 05:01:15 +0000
Manifest this update: Sun 07 Sep 2025 05:01:15 +0000
Manifest next update: Mon 08 Sep 2025 05:01:15 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: V2txE9sPibNcP9xp3QHro/6kO2Y4GVJtG0j+ihPZD4o=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c9:bf:7b:a0:7b:8d:ec:b5:8a:ef:d6:4b:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Sep 7 05:01:15 2025 GMT
Not After : Sep 8 05:01:15 2025 GMT
Subject: CN=44f5baa1b3a9bb9a660aadf20feb3c8698cc323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:7e:0c:f0:66:b5:84:3e:68:2c:b3:27:7c:
6d:67:22:6e:4f:4c:57:fd:b1:10:7a:10:c0:a8:dc:
99:9f:e2:49:0e:b0:ce:25:e6:39:af:e4:e9:14:6d:
1f:b0:b0:20:c7:db:8f:d4:ea:be:bd:5b:5a:aa:cc:
fe:65:9c:7d:ba:14:80:d3:81:fd:ab:98:e5:e0:31:
52:e5:39:13:10:b8:57:0f:0f:34:25:05:f2:89:77:
b6:83:b0:d0:79:5e:86:e0:e5:38:32:b6:21:f3:09:
bd:2f:d5:9f:36:c5:48:8b:04:96:35:ea:6e:b2:f9:
26:2c:3e:fd:95:41:00:39:7d:e8:4a:24:a8:f1:bf:
48:77:f7:0d:a6:50:ce:57:11:7a:87:cc:39:9c:82:
3d:ed:e8:f3:ae:cf:34:44:b8:80:c3:89:81:9b:7c:
31:a2:72:2b:6f:47:c3:b2:19:5a:68:aa:70:4c:59:
96:ed:18:14:e9:6e:da:4c:80:b7:57:ca:31:9c:f4:
6c:4c:d8:0b:3c:ed:e0:b6:05:db:15:dc:c0:c4:f0:
cb:50:58:02:7f:40:7a:3c:a6:51:e3:e5:fc:03:61:
4e:24:c4:c1:5e:e5:85:38:b8:98:86:f9:ce:4f:98:
30:dd:65:25:0d:ce:24:1f:41:83:42:88:c7:1e:e3:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:BA:A1:B3:A9:BB:9A:66:0A:AD:F2:0F:EB:3C:86:98:CC:32:3E
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ae:b9:b6:64:83:6e:15:6b:e7:c4:97:95:77:ab:f6:ae:57:
f1:cf:9e:f8:a6:e9:8c:7c:2b:b4:52:2d:1c:c4:b2:ed:9e:2e:
83:d4:b8:3c:42:6d:44:75:6b:5c:34:c6:d8:82:d4:c0:63:26:
0e:75:b2:2b:02:9e:b7:59:8b:d8:da:24:15:21:03:62:8a:b3:
bb:54:0e:d8:47:d8:8e:fe:4d:18:1f:a6:e6:50:f3:2f:ef:fb:
b4:9d:d0:14:ab:14:b2:d6:e9:a0:22:82:1c:f1:0c:3a:d9:d9:
85:4d:20:f9:02:79:52:65:28:57:ab:54:d7:52:7b:d3:7e:b7:
b2:6d:c5:f8:00:a2:5e:ce:3f:ab:bc:06:4c:1f:37:02:9e:d5:
0f:7c:0e:b3:a2:5d:56:0b:c8:73:c6:a1:cc:3d:02:c7:76:05:
44:d9:a6:27:ed:af:b1:d7:da:31:1e:18:b7:59:f9:dc:1f:9f:
fc:fa:24:03:c3:70:2c:90:35:f3:5c:0f:fe:c5:d3:be:37:bb:
45:dd:b5:d8:9a:bd:bd:0c:ea:b3:fa:2d:9d:f6:40:a3:09:02:
18:1a:39:bd:41:16:55:43:cd:6d:36:31:24:30:cb:d3:09:aa:
d7:c7:88:d5:c1:6d:6c:c2:82:82:67:a2:fe:46:ed:25:dc:0b:
30:50:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:45 2025 by rpki-client