Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: hs4qfHh9Qp3pv+AoJLH1UvCnTD16SYxK5swg7ljG/hY=
Subject key identifier: A5:54:98:4A:76:77:D9:A1:B7:DE:74:80:39:EC:48:D7:12:17:74:2B
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01992F35C7948E787073F79F5402554D2D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0703
Signing time: Tue 09 Sep 2025 16:01:17 +0000
Manifest this update: Tue 09 Sep 2025 16:01:17 +0000
Manifest next update: Wed 10 Sep 2025 16:01:17 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: LFfwMk9x0DqduGw6updnyFWslzi/VUfIqGzg9/JZ+Y0=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:c7:94:8e:78:70:73:f7:9f:54:02:55:4d:2d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Sep 9 16:01:17 2025 GMT
Not After : Sep 10 16:01:17 2025 GMT
Subject: CN=a554984a7677d9a1b7de748039ec48d71217742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:22:de:2d:39:71:9d:b8:7f:b6:02:b0:42:
1f:f4:45:f3:65:8e:1c:03:b9:9c:3b:b1:a0:65:f6:
b2:cd:0b:6a:93:4c:85:2e:42:3b:e1:3d:be:75:af:
66:53:0b:c9:ef:26:d1:56:c7:29:6b:f3:1e:0d:42:
6c:f5:0f:e5:b1:4e:60:98:fe:cc:dd:2d:c8:fb:7c:
da:52:6d:4c:ff:88:73:87:e6:51:39:b9:f3:d4:86:
eb:45:4c:c7:6a:53:fa:92:92:5f:ec:3b:7c:53:c3:
fd:38:b1:76:fe:85:bd:f6:f4:f9:7c:6a:ea:d8:29:
52:da:95:c5:25:c9:90:3f:0d:b7:53:ad:9d:9a:09:
31:45:a1:6d:c3:13:a2:49:4c:80:4f:d5:cb:b8:53:
a9:ad:10:59:bd:01:b8:af:7b:ef:0e:77:e4:15:c6:
17:2a:f7:70:20:49:d2:34:43:6f:92:e2:dd:9e:cf:
e4:66:a1:c2:e9:a2:f5:d3:46:dd:0c:e4:26:4e:04:
30:54:48:c7:62:9d:34:70:8a:c1:ab:c3:ff:8a:43:
3e:60:00:c1:ef:dc:ce:b6:32:81:91:ad:70:1a:aa:
67:da:08:c8:b9:ae:b4:48:2c:79:f7:13:cd:84:e9:
4e:9e:b2:22:96:9f:85:c4:c0:af:7b:63:0d:24:85:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:98:4A:76:77:D9:A1:B7:DE:74:80:39:EC:48:D7:12:17:74:2B
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:b2:10:97:77:98:79:5a:34:bf:cc:50:2a:fa:36:39:02:
a3:eb:92:02:07:0c:b1:ca:37:6e:ba:b5:97:01:b9:f4:63:30:
4a:c3:86:c8:df:56:10:8d:7c:19:31:04:df:91:d6:01:a0:6a:
23:9f:73:9f:76:b9:66:c4:84:47:a9:19:a4:30:ec:74:94:04:
f7:c1:06:e2:ae:b7:d5:12:0e:52:28:d4:99:57:47:4d:a1:5f:
a5:72:0a:bb:11:2b:4a:59:ac:db:e5:02:6c:af:95:a3:5a:27:
66:0d:96:48:e2:7c:e5:aa:5c:4c:b8:17:c1:35:34:4e:ce:35:
a2:20:1f:75:87:fb:b4:61:e0:ba:30:aa:6e:7a:ea:8e:f3:d4:
d3:15:64:be:83:e0:eb:0b:9f:a6:d6:1b:4f:cc:71:13:3c:0d:
68:99:1d:04:08:e2:ec:59:90:87:be:7e:90:c6:ed:1c:40:be:
f3:15:9b:f0:1d:de:b3:2d:cb:99:61:85:31:57:af:6d:b5:64:
6f:cb:a1:36:a6:26:82:06:a9:18:08:c5:32:73:a9:e7:c8:ec:
36:14:0f:b7:00:d9:bd:7e:bf:be:22:51:07:dc:cb:8e:cb:d1:
e1:5a:af:16:a5:a5:1d:e7:e9:e6:0d:7a:4a:f3:08:5d:38:e8:
e6:2a:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:24:41 2025 by rpki-client