Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: mlJ+28QLaHZI0/38Lbw/D+G9Nz+b12s5rCdv72rNppA=
Subject key identifier: 79:8B:93:99:CF:6C:27:E5:00:08:2C:FE:70:F2:DD:56:D1:73:96:F2
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019860FFF8EDA8B8A7F40760FEC7D3A2A3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0300
Signing time: Thu 31 Jul 2025 15:00:44 +0000
Manifest this update: Thu 31 Jul 2025 15:00:44 +0000
Manifest next update: Fri 01 Aug 2025 15:00:44 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: tKSueXb+0SiOmmCOJpaAsACtmyuW1IP1O3AeJptiDsY=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:ff:f8:ed:a8:b8:a7:f4:07:60:fe:c7:d3:a2:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jul 31 15:00:44 2025 GMT
Not After : Aug 1 15:00:44 2025 GMT
Subject: CN=798b9399cf6c27e500082cfe70f2dd56d17396f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:4b:da:09:34:68:89:e4:73:b7:9a:1b:7d:
71:b9:bc:2b:b4:c8:ac:90:ae:4a:f1:41:ef:27:fa:
2d:ba:68:5b:c0:41:cc:99:6a:b4:72:0c:31:f0:58:
29:5b:b7:73:fb:f7:e5:8d:c1:9f:cc:79:42:f5:a3:
35:0a:97:c6:2f:ea:27:92:1f:1d:9e:06:31:cd:a7:
45:ce:c6:2f:95:91:fd:8b:00:c3:64:36:53:25:e5:
f1:33:6a:3b:ea:a0:56:95:eb:37:e7:bf:ff:b5:55:
57:3a:5b:19:51:e5:31:cb:2d:f2:d3:e3:e5:9f:29:
9a:39:78:d3:33:3d:73:37:f1:ff:8c:f2:d0:95:6f:
4e:32:5b:f1:cf:26:5a:29:36:db:f5:e1:b6:f5:b4:
ad:c0:74:7b:39:9f:98:04:03:14:31:f7:8b:1b:da:
51:bc:26:7a:53:85:06:b2:1c:a3:96:76:1e:0c:af:
b2:01:c1:ed:19:75:af:b6:79:1c:d7:9f:e0:84:3a:
54:a4:46:9e:11:1d:bc:15:bd:c8:c5:05:a9:75:97:
06:ad:5e:5e:8b:a5:44:e6:01:cf:6c:c6:f1:10:b8:
45:5e:fe:30:23:c9:02:3c:03:b9:a7:01:b5:c3:16:
25:a6:2c:e5:c9:d6:d6:c9:3e:1a:d5:1a:fb:4e:a3:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:93:99:CF:6C:27:E5:00:08:2C:FE:70:F2:DD:56:D1:73:96:F2
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bb:43:d1:e8:5f:53:8e:5d:63:8a:56:69:03:87:ed:f8:ab:
ca:88:bb:af:f7:2b:24:50:e0:ad:3e:e9:fd:25:59:3e:8c:b3:
6a:77:df:28:ed:57:b7:b2:d1:8b:91:5d:55:a4:5c:5a:87:18:
ec:a2:6a:44:42:f4:23:ad:52:93:f0:3d:73:ee:d7:b1:36:71:
d1:7b:db:a3:d3:ae:3e:07:fb:07:20:ec:05:bd:8e:a8:0d:9f:
ad:bf:01:64:b6:e0:d2:f6:34:fe:4a:c9:bf:fe:5a:c6:dc:dd:
83:95:09:b0:2a:f7:af:60:6a:91:bb:12:1d:b9:d1:ad:69:b4:
12:2d:1c:fe:96:ba:e0:18:e8:3a:3b:25:c3:4d:0a:90:b9:d4:
c8:1b:6e:a5:a6:27:54:43:c0:7f:d3:59:58:4e:53:fe:b2:3b:
78:c4:61:23:85:0c:cb:0a:cd:c4:8b:d3:79:da:ed:0b:ab:32:
83:fe:d6:b9:4b:3e:07:12:97:43:5a:39:27:2c:cd:b8:00:9e:
99:42:18:de:81:78:df:2c:be:60:f2:bb:c0:bd:65:e7:e5:5f:
e2:4d:ce:5f:f7:c5:19:55:e2:ef:49:c0:99:8f:3a:6b:28:de:
60:8a:91:32:56:db:73:48:5b:27:6d:f6:f5:f8:d2:36:d7:18:
0e:f8:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 20:04:53 2025 by rpki-client