Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: ydxo6s1oqZFIf7bktkPmgBuxwzxzBVYIEHwvTATLWPs=
Subject key identifier: 1B:7E:A4:62:03:7C:CE:A3:0F:D4:A5:17:02:B0:BC:4F:CC:E1:A6:34
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0198523179F1739E1BE92D8195FBABD69F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 024E
Signing time: Mon 28 Jul 2025 18:00:30 +0000
Manifest this update: Mon 28 Jul 2025 18:00:30 +0000
Manifest next update: Tue 29 Jul 2025 18:00:30 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: jV0o3ZMYyI/xHVv6zYweKRxrYa+1M+I9s+6gbdjQkcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:79:f1:73:9e:1b:e9:2d:81:95:fb:ab:d6:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Jul 28 18:00:30 2025 GMT
Not After : Jul 29 18:00:30 2025 GMT
Subject: CN=1b7ea462037ccea30fd4a51702b0bc4fcce1a634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:86:07:ed:ae:89:f0:20:19:c0:ee:ce:3b:0e:
f8:e7:43:a4:73:65:51:6a:48:b4:e2:12:58:97:aa:
42:e4:61:17:ce:76:34:ae:80:1e:72:6a:20:ab:30:
25:c8:1a:29:d9:94:d7:53:97:51:33:98:26:a3:d7:
20:45:d9:d9:ec:cc:09:e7:cd:3a:4d:e1:60:20:90:
5d:63:f5:f6:a2:78:bf:e7:ba:92:58:ec:6e:6c:39:
70:18:ee:9d:af:6e:92:00:88:eb:7d:e8:bd:3a:12:
23:15:4e:51:5a:c8:bc:ce:71:fe:0f:b6:65:61:14:
f3:53:ad:6d:09:66:ff:2e:f1:35:a6:a4:55:b7:aa:
fd:70:5e:a6:89:f5:ab:13:3e:ea:83:fb:2d:ea:d9:
b3:51:81:62:41:cb:99:b4:33:62:14:d7:ee:4d:2e:
4f:f4:ca:81:f3:0f:9d:76:56:eb:45:30:29:f9:c8:
a3:67:6d:34:8e:1f:5d:ea:f5:30:99:55:f1:d6:d5:
fd:d2:a3:da:20:f6:f4:98:1d:8f:06:ce:c0:0a:f5:
cc:8e:6c:0e:9a:48:3e:5c:97:60:3d:a2:97:03:86:
63:a2:fd:cd:cd:1c:6e:d2:54:e1:33:99:72:f1:ea:
ca:3f:99:66:6a:8d:f4:19:f3:c1:fc:d1:b2:d8:b3:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:A4:62:03:7C:CE:A3:0F:D4:A5:17:02:B0:BC:4F:CC:E1:A6:34
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:e4:8b:b8:e2:63:d2:16:05:26:42:43:55:b3:80:ad:fe:
64:3c:1e:a1:a5:8a:b1:4b:3b:8d:b7:c2:d9:61:d3:76:68:f2:
4e:c0:d8:db:3c:18:43:62:16:6e:ae:0e:a4:af:ae:96:cb:b1:
65:17:ac:18:cc:fa:47:f4:69:f1:9c:16:9d:c4:79:b6:a1:da:
25:97:df:89:5e:82:b2:90:da:a7:36:fe:42:81:71:e7:26:3c:
53:53:4c:76:a6:d7:ab:27:2c:ed:52:cf:36:b0:a5:20:ca:d6:
7a:9f:b1:c0:cd:7d:8b:f9:5e:4d:30:88:7f:b6:bf:58:66:df:
80:86:67:e3:0c:0e:1e:6e:78:c3:1d:14:14:c7:65:85:85:5c:
4c:38:9c:c8:cf:42:39:c1:5f:75:e3:8f:2d:77:4f:49:52:68:
cb:3f:5c:80:e4:c0:85:eb:2c:d3:46:d8:64:29:5c:85:4d:3d:
39:73:01:69:ec:60:ba:44:bd:84:3f:e4:fa:5e:95:ae:ed:fb:
7f:cb:02:69:83:18:fc:26:c3:3f:d5:18:1b:65:5b:27:99:7a:
86:9b:5b:33:62:9a:fd:28:fa:de:6c:25:73:5e:bd:c6:a3:d7:
71:c1:1a:5b:a7:b1:52:4e:a3:4a:01:42:f3:11:9b:13:e1:93:
d1:7b:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:34 2025 by rpki-client