Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: PsKC2Y/rTmXlklePYdBvceUq312DmB7LrYlT8rkRpO0=
Subject key identifier: B6:56:27:7A:C2:F4:22:46:56:42:B6:3F:A8:11:77:BF:28:81:28:08
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0199307F4E7E82B7B711CB3E068536C52733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 22:01:13 +0000
Manifest this update: Tue 09 Sep 2025 22:01:13 +0000
Manifest next update: Wed 10 Sep 2025 22:01:13 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: UxbS224sH+8OOIzQLVCghW0U0b4NB5WdB6ELN0aqRWU=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:4e:7e:82:b7:b7:11:cb:3e:06:85:36:c5:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Sep 9 22:01:13 2025 GMT
Not After : Sep 10 22:01:13 2025 GMT
Subject: CN=b656277ac2f422465642b63fa81177bf28812808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:27:7f:14:34:bc:37:0e:66:c0:35:2d:9b:
da:6e:89:df:fc:4e:8e:2e:56:f6:10:fc:00:40:eb:
8b:4b:3c:2d:2f:06:42:8c:62:9c:1c:61:70:d6:35:
30:a1:3b:f4:69:27:cf:3e:89:b9:ab:bb:5a:3a:10:
21:a8:9c:bf:ad:df:de:f1:a3:d6:48:48:e3:52:ec:
e8:f5:00:f1:59:4b:51:d3:fd:12:b9:8f:e3:40:f0:
e2:e1:66:b8:52:c4:4d:eb:25:f0:f7:3b:5d:65:f3:
fd:d3:f8:16:f8:42:59:ee:c8:79:6f:f6:ad:28:6a:
0b:2e:f1:58:3a:e0:d4:69:f7:f6:0b:06:ae:5d:bb:
c8:b2:7b:5e:32:53:3f:76:cc:28:50:85:18:24:a7:
44:ac:2f:9f:52:8b:ed:2d:9c:d4:18:e3:88:2f:d8:
29:5b:1c:84:1b:d4:dc:80:12:91:50:79:aa:e0:32:
bb:62:79:db:8d:46:50:f8:50:1c:9f:c8:24:e3:05:
f4:0c:67:53:a7:29:f4:34:92:bf:78:70:a7:47:5c:
97:24:c0:c7:19:b8:01:e2:e3:d6:66:39:87:1e:1d:
58:bc:fc:a3:6b:6d:f3:28:a5:a0:73:2a:3f:f0:ca:
ec:8c:ad:14:55:79:f3:ca:84:ce:ec:78:ef:23:10:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:56:27:7A:C2:F4:22:46:56:42:B6:3F:A8:11:77:BF:28:81:28:08
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:e2:80:9e:7d:e3:49:7b:a2:f5:bd:f4:3c:e8:9f:d1:9f:
7a:e0:18:25:d6:e7:32:03:91:28:65:7d:11:c4:b4:b1:91:b3:
40:cf:34:4d:71:11:5a:2d:47:b4:b0:e4:74:46:de:b1:70:1e:
42:f6:e3:5f:b4:c4:5a:a3:3f:e6:9a:a0:a9:21:a5:12:34:76:
3c:a2:db:6e:1f:15:be:13:6a:37:fd:65:2a:49:04:fb:33:1f:
70:23:f0:cc:5d:40:b4:c5:10:96:2f:3a:bb:e1:9c:2f:61:0e:
25:79:7c:af:73:75:4b:b6:a2:79:c6:49:d9:33:a2:1a:ac:fc:
d6:a6:b7:3e:9e:42:4b:25:93:5b:26:81:53:49:78:06:57:9b:
2f:a7:ca:f7:26:a1:00:6a:a9:f2:85:78:15:23:43:92:fe:e4:
98:19:5e:73:e2:ea:2d:e0:43:d5:ec:06:12:90:50:56:0d:7b:
b1:ab:24:69:22:d2:ac:0a:70:13:6c:2c:4f:0d:8a:14:9f:63:
17:58:f8:e5:9c:88:d8:e4:b6:41:9e:0e:17:78:9d:b2:f9:28:
bd:11:fb:08:1c:9f:4c:a3:f4:c0:d5:d2:91:75:48:f8:4a:4c:
11:bd:39:d1:ff:5f:a8:d1:b1:58:a2:d6:41:5f:1a:29:eb:c6:
a3:41:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:30:38 2025 by rpki-client