Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: 00GB4uC9njKngxP2u1qDJnpVFiPT/pK5nDI/6JkfB0A=
Subject key identifier: 14:E3:DD:D0:99:5C:E2:2A:76:84:E1:36:53:F4:9F:74:03:05:49:FF
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 0198D4733342F61D59E9FBB79B88C2E17F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0945
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: gyIqvZL0942EypCEI3bzEkP8P4CMABVxFdWeBJtC+go=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:33:42:f6:1d:59:e9:fb:b7:9b:88:c2:e1:7f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=14e3ddd0995ce22a7684e13653f49f74030549ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:23:75:d8:82:32:9f:6e:89:77:de:33:43:
13:3f:d8:63:4c:b8:3c:90:41:68:ae:0c:67:07:55:
c0:87:9d:2f:3c:61:70:a1:3f:11:32:33:ed:82:23:
95:27:70:32:a8:88:fe:d4:fd:e3:8e:a4:75:25:a1:
01:73:f5:1e:01:e6:15:61:53:7b:80:e6:05:fe:a3:
ea:a5:c3:43:da:11:c1:bf:fe:25:6f:87:3e:fb:8a:
e5:59:f8:19:9a:11:47:27:06:5b:b7:2d:ca:0b:0c:
13:ce:60:fa:bc:12:f3:0b:d5:e7:11:95:0b:8e:af:
45:a8:80:79:a6:6f:b3:08:4f:14:88:72:45:7b:58:
f2:7b:ef:3a:ce:91:19:30:9d:02:87:a5:4c:89:ad:
b6:7e:9b:60:40:75:80:4f:9d:3a:37:a8:03:87:06:
3c:18:cf:48:29:dc:43:ec:c4:47:c2:b1:f2:74:34:
d3:4b:83:f4:a8:13:08:f7:27:dd:6f:37:46:99:97:
ca:97:61:6b:8c:7b:e3:89:9f:69:57:72:da:4a:45:
4f:4b:18:de:80:d5:61:ec:9b:c7:80:fb:48:6c:3c:
0a:f6:27:4e:64:e5:b7:33:c7:e8:40:26:0d:17:3b:
46:9d:33:d0:56:13:2f:4a:87:01:2d:00:8d:7b:24:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:DD:D0:99:5C:E2:2A:76:84:E1:36:53:F4:9F:74:03:05:49:FF
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:1b:4c:ef:3b:75:c7:08:a4:17:40:19:46:90:e8:f2:41:
6d:c3:1e:26:98:52:7a:bc:2c:f4:18:a1:65:9d:8f:10:7d:1e:
74:26:be:6c:a1:8c:cf:31:92:3d:29:c5:01:ec:8c:22:31:dc:
8a:77:6e:d0:9f:63:0b:49:d9:cb:3b:62:28:2a:f6:c4:19:39:
ff:89:d3:2c:ff:64:6d:85:2b:41:50:96:40:0b:a1:19:91:fd:
03:4e:2e:64:03:d7:4f:33:16:42:17:5b:73:6e:b4:35:85:cc:
18:67:30:18:67:7a:b5:ca:c3:db:04:21:67:0f:54:25:84:6b:
c0:a7:25:9b:0f:2f:95:97:5e:4c:07:1f:ae:ba:6a:15:1e:81:
14:f3:9f:27:47:86:3c:aa:bf:1e:04:a8:20:47:2c:6e:be:64:
74:b0:04:79:bb:ff:22:4c:1e:8d:7c:85:11:77:03:07:ff:9d:
91:b7:df:08:fe:be:9b:8a:dc:45:83:a6:21:48:73:3e:4c:59:
42:b6:8b:f3:1d:c8:b1:76:1d:4a:83:68:4e:21:d3:db:f1:92:
56:ec:67:fc:86:d6:25:29:88:2f:75:f9:8e:72:d0:b5:e1:aa:
e7:98:da:5e:2e:b5:29:e2:43:fd:6d:36:b2:83:2a:4a:19:b9:
50:83:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:37 2025 by rpki-client