Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: eDng+Ef6eXEnyDOO14y8LaqE7SM6imPftETkcZYI/e0=
Subject key identifier: D6:D7:22:57:EC:FD:B7:50:1D:4C:C1:63:A0:90:3B:B0:29:2D:CC:84
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 0199240C843D03F5808F684A4700EB00AA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 12:00:23 +0000
Manifest this update: Sun 07 Sep 2025 12:00:23 +0000
Manifest next update: Mon 08 Sep 2025 12:00:23 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: b+wFcJkwj4BQTsajuKs2COklX0kifh1d/lYRSoLoS+k=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:84:3d:03:f5:80:8f:68:4a:47:00:eb:00:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Sep 7 12:00:23 2025 GMT
Not After : Sep 8 12:00:23 2025 GMT
Subject: CN=d6d72257ecfdb7501d4cc163a0903bb0292dcc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:bb:ad:c8:6f:b7:f0:f9:dc:a4:7b:b5:70:
a5:e9:71:5b:eb:4d:28:94:57:5e:d7:96:26:03:fa:
cc:64:1e:3c:b3:2d:5f:db:06:f7:7d:f0:0d:de:12:
4d:2d:23:7e:5f:9b:14:c5:58:7d:00:b7:9d:a7:15:
4f:55:f8:27:f5:68:a7:28:66:31:0a:8a:e0:f2:84:
b0:ed:86:84:ba:3b:4e:a7:a3:5d:3d:95:62:46:52:
b3:74:9b:9e:1e:45:14:52:ee:c2:09:72:52:a9:7b:
72:e0:50:5c:60:f9:44:f8:40:d8:60:2e:59:07:c5:
09:03:ac:1c:0f:9d:d7:1e:03:18:09:5a:ae:fb:92:
b4:bb:7e:75:30:87:e2:fb:cb:11:af:86:69:e4:bc:
2e:4e:49:93:19:d8:9e:7b:48:81:2c:03:ac:0e:08:
71:58:ca:0e:9c:d3:89:cb:b8:54:5b:3f:8c:6b:df:
33:97:a3:a0:65:52:d8:73:22:3c:8c:04:25:36:b4:
cd:07:83:f6:dd:e7:ce:a2:75:81:b1:c0:ad:2a:a3:
92:c8:55:51:25:75:25:86:5f:71:76:fa:73:c2:09:
bb:50:ab:2f:93:ab:8e:78:0b:dd:14:a9:a6:82:65:
bd:b1:20:e2:e5:93:da:88:0e:42:40:c2:25:7e:50:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:22:57:EC:FD:B7:50:1D:4C:C1:63:A0:90:3B:B0:29:2D:CC:84
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6b:9b:44:4b:c4:77:90:7e:c7:d7:a0:ae:00:da:d4:cf:b8:
db:62:06:8f:64:d4:65:31:be:b9:93:ff:b8:2c:1f:df:99:9b:
d0:75:80:6e:23:4b:94:73:31:b0:3c:18:95:93:04:4e:c4:21:
4a:0b:77:88:84:82:15:e0:c9:8e:22:88:4f:29:71:6b:0c:df:
66:f1:73:c7:be:32:e2:cb:44:85:8b:ef:7f:c8:6c:45:18:8a:
74:f5:1c:3f:7c:77:63:d2:6f:38:f0:b8:be:e6:41:f7:d8:13:
15:2e:07:d5:ec:e7:ac:7a:16:61:8d:50:47:8a:c3:59:9b:e1:
8b:d8:16:71:c6:f4:0a:50:12:44:83:de:f6:77:45:4e:c7:00:
07:66:46:b8:99:14:91:5e:d6:f6:8b:62:e3:47:e8:02:95:cb:
20:2b:ff:81:32:7b:4a:a8:f4:3e:49:75:6a:9f:2c:30:68:62:
38:43:11:bf:5a:e2:f4:0a:09:f7:6e:c2:cb:2b:b6:2c:34:b9:
2c:5f:3e:a0:4e:65:70:8d:0e:40:bf:2e:73:75:5e:e7:2f:86:
23:bc:ca:b3:d7:a5:12:6f:c3:60:77:13:21:94:04:a9:20:b7:
b0:69:f5:d4:6f:d3:e4:c8:95:72:f9:00:fc:17:87:ca:13:de:
07:9b:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:46 2025 by rpki-client