Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: 8ceQ8uAhOId13j6Qx6QO07GR3Z7jYGsuU9bbXCLLcqg=
Subject key identifier: 33:DA:FF:7E:5E:35:63:CE:81:8F:02:B5:BB:89:82:A7:19:80:BF:5A
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0197C6136486CE7E4DD2CDB9ECD7DB1D73E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0F28
Signing time: Tue 01 Jul 2025 13:00:48 +0000
Manifest this update: Tue 01 Jul 2025 13:00:48 +0000
Manifest next update: Wed 02 Jul 2025 13:00:48 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: t4cF3zgq/EXN2thjIAW41dTBdrLcTC6ZltWFGbRyH10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:64:86:ce:7e:4d:d2:cd:b9:ec:d7:db:1d:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jul 1 13:00:48 2025 GMT
Not After : Jul 2 13:00:48 2025 GMT
Subject: CN=33daff7e5e3563ce818f02b5bb8982a71980bf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:cf:2e:a7:58:df:e9:14:1c:d3:1d:30:95:
c7:5c:77:4e:bd:a3:b7:e9:3b:d2:11:51:1c:80:bb:
56:9e:00:c6:e5:aa:94:02:56:f4:a6:9a:2f:91:07:
68:8b:71:44:d8:c9:62:17:ec:c9:e0:19:45:0d:5f:
1a:4e:73:42:62:7e:8b:1d:60:39:38:1c:1f:c9:04:
5d:13:23:27:5a:b9:ba:85:60:04:81:ec:9e:f3:3e:
34:9c:bb:f2:4d:5c:8d:1d:6c:31:78:79:80:ca:23:
91:98:a1:a4:9a:1c:0c:b5:64:dc:f6:ee:d3:ed:32:
6a:db:ac:10:9a:2e:d0:63:23:e8:2f:e3:fb:a0:98:
04:d7:57:52:a3:c2:db:49:ef:eb:0f:c5:e3:62:e9:
79:d3:5b:14:63:78:47:c4:ce:52:41:df:34:49:c8:
ef:d8:2f:38:45:78:fd:a4:45:53:40:d0:87:5c:2f:
ba:2e:4f:6e:99:14:cb:3d:0e:bd:b6:0e:ae:02:92:
5d:f5:1a:45:b8:53:22:b8:63:85:92:35:f1:2e:92:
a7:98:35:53:b8:2b:52:0c:f5:50:20:3e:07:69:89:
61:0e:df:4a:4c:76:46:67:fa:ef:2c:8d:d6:3b:93:
69:f6:ab:5d:95:7c:96:26:66:bc:0c:26:8b:b9:17:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:FF:7E:5E:35:63:CE:81:8F:02:B5:BB:89:82:A7:19:80:BF:5A
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:74:3a:15:7c:ad:5e:4c:76:f3:d9:01:af:86:e2:d5:2f:
43:32:e8:09:6b:3b:e6:cc:fb:9f:6a:53:b2:ab:ed:1b:a9:8e:
c3:f7:7d:16:79:8d:02:26:09:2a:84:a4:1f:43:41:02:e3:7f:
9d:57:f7:dd:a4:55:9a:de:86:bd:b7:e6:35:65:a1:9f:0d:fa:
20:49:a9:f8:f9:5a:ad:ac:fa:e2:46:c0:a0:71:e5:34:8f:6f:
d5:96:3a:61:3b:34:cb:15:c5:53:78:36:cf:e3:4f:89:d1:44:
16:32:3c:61:12:7b:1a:d4:ac:73:37:b9:4a:db:7f:7e:c6:11:
77:a5:6a:04:1d:d6:a0:fa:0e:ae:78:ac:00:ef:dd:61:71:c4:
c5:ae:f8:dc:84:c8:bc:dd:1a:98:e7:4a:06:59:fd:a2:94:9f:
73:3b:da:6a:1b:9a:3c:4f:4a:fd:52:09:cf:3e:09:21:0c:76:
ab:27:70:c7:d0:5d:c7:77:ce:99:2f:77:72:78:d0:3e:54:0d:
22:00:df:32:8b:59:3e:7b:47:ea:53:63:6c:97:8f:0c:6f:b5:
c3:35:f7:20:42:bf:4c:6d:60:eb:6e:56:89:ee:d4:cd:11:42:
10:ab:ce:55:18:7a:b9:1e:dd:66:3f:87:51:a3:dd:50:98:75:
69:4e:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:15:39 2025 by rpki-client