Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: rku42iorxDGfJSUr/+hH3ZYeGrZi9b5gGEBLcCIInko=
Subject key identifier: A4:2F:B1:AF:7F:F7:B7:3A:EC:D6:3A:F5:9F:ED:ED:39:BA:BE:37:8C
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01984AAF2E3C8804BF95988B29C04507E435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:51 +0000
Manifest this update: Sun 27 Jul 2025 07:00:51 +0000
Manifest next update: Mon 28 Jul 2025 07:00:51 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: eldxRKz+VyAx/96lkWDENEsniplUovWWa8BX6kivZDI=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:2e:3c:88:04:bf:95:98:8b:29:c0:45:07:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jul 27 07:00:51 2025 GMT
Not After : Jul 28 07:00:51 2025 GMT
Subject: CN=a42fb1af7ff7b73aecd63af59feded39babe378c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:e2:05:a2:46:36:0c:e0:d7:f7:92:d8:75:
7a:46:6d:4a:6b:0d:4b:73:5e:3f:ae:9a:74:ee:1f:
e4:e5:07:ab:60:44:23:3d:37:3a:81:c5:97:46:b9:
e9:14:d0:0f:78:0e:54:ce:79:e1:ab:c3:9c:64:e7:
31:46:70:01:bb:10:19:d7:24:d7:25:33:f9:35:b2:
53:8f:95:dc:b0:12:2c:a2:6e:78:f9:86:da:81:fe:
54:55:0a:59:bb:c3:c7:fb:7d:94:ee:8b:f7:37:2f:
cd:fa:1e:02:a0:cc:43:a1:10:18:b8:eb:27:52:7a:
b5:7e:a2:24:4e:00:0c:4b:23:00:11:4b:37:51:de:
71:fb:8f:0a:c7:0a:9f:8a:43:98:3e:91:8d:25:0f:
a4:1d:7c:76:8b:43:02:37:27:b0:55:a9:ba:7b:0b:
d1:5b:1f:20:7f:4f:fd:a7:10:e0:17:26:1c:aa:bf:
bc:24:8a:ce:fc:59:e1:a1:c1:55:2e:42:1e:bf:8e:
1f:84:73:2e:da:a0:8d:67:53:f9:ab:f4:1f:17:fd:
d8:ce:85:ee:eb:24:ff:06:e6:7f:58:26:e6:cd:0c:
7a:d7:9a:30:fa:7a:63:b3:e3:d7:ce:12:67:97:36:
8a:72:37:38:88:07:46:b8:a5:e3:fb:99:06:88:22:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2F:B1:AF:7F:F7:B7:3A:EC:D6:3A:F5:9F:ED:ED:39:BA:BE:37:8C
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:9b:2e:ad:e6:15:38:a1:e7:e0:d4:2c:06:03:e5:eb:6f:
0e:4e:d0:ca:20:a8:cd:0d:a4:34:ef:0f:07:02:2f:9d:28:0e:
ef:13:1b:dd:7a:43:9a:01:7e:97:19:99:30:f2:40:b0:16:9c:
02:1e:c2:fc:f6:62:b6:b1:b1:03:90:a7:59:d5:1b:39:65:79:
eb:fe:18:1f:d7:f3:bf:d7:e7:46:43:f7:db:20:60:c9:a1:c1:
ef:ec:0e:92:6d:6d:d0:20:71:b2:00:3e:1e:5a:9a:e4:3f:8d:
07:d6:b7:7a:73:7c:50:9b:91:16:9d:9f:a9:de:75:f4:fa:f7:
52:84:79:4a:a1:97:e7:81:eb:28:40:db:2b:ae:9f:20:06:2d:
7d:16:68:8d:a5:07:ad:68:d7:60:c6:d4:2c:0e:39:2a:88:f3:
f5:53:46:5c:a0:90:88:da:2e:b7:9e:2e:95:e0:b0:eb:98:54:
0f:61:6a:dc:51:d8:49:82:fb:62:bf:4e:dc:41:46:9d:8a:51:
9b:a7:d7:79:9f:5b:da:8d:b8:7a:34:7b:f8:d6:66:a5:2a:a9:
5d:a2:8e:11:6b:53:04:48:9c:53:7c:3c:91:b4:f5:aa:7b:24:
cf:f9:88:c6:10:d5:bf:7b:1d:c9:3d:a2:98:be:e9:03:01:a1:
06:72:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:24 2025 by rpki-client