Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: Iy8GfQAZ+SUByCDOCkE2eW8wRrrn/aGBtQp9Jz5KI84=
Subject key identifier: AF:DD:44:B1:FA:67:E9:8E:CC:9E:E1:C6:1B:7F:51:FD:C1:34:AA:F0
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 0198D472873F213D60C8D68C5A2093962F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: GllFof2HO9qhb5SRODQSC4tw+bGIIgaFj6qNSG3gO4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:87:3f:21:3d:60:c8:d6:8c:5a:20:93:96:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=afdd44b1fa67e98ecc9ee1c61b7f51fdc134aaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:b0:60:b6:4d:25:d8:e2:e4:a2:08:df:1b:
53:07:53:0d:d1:62:66:b7:2c:87:32:38:db:75:59:
58:ef:7e:07:28:c5:f4:59:74:21:f2:97:15:71:a0:
61:eb:8f:1a:d9:eb:1e:f0:d1:a8:95:13:94:99:04:
21:c9:cf:7c:3a:8d:71:45:e6:ab:2a:6f:c3:ed:0b:
b2:9a:e7:e5:93:d5:82:aa:b1:a0:e3:84:b3:bb:99:
00:8a:a5:63:19:fb:ae:3a:67:86:8a:a8:c7:ea:e9:
ab:d3:b7:b1:81:ce:4a:24:30:ee:38:16:78:ed:2d:
81:9a:1b:fe:b3:5d:fd:e6:d4:a5:b7:48:6d:60:ab:
5c:ee:b0:eb:5f:49:fa:97:06:c8:a3:f8:d1:35:f8:
b2:d3:a0:08:ef:9a:86:31:d3:8a:94:41:e5:24:ce:
46:6a:b6:ae:67:65:6b:ac:5d:e1:14:91:a2:a3:8f:
84:75:4b:b5:66:55:a9:7c:b7:e4:59:82:1d:b7:b7:
eb:24:3a:26:ef:f7:31:c3:f9:80:c4:88:87:48:08:
82:0f:e1:67:5a:b2:dd:36:9e:41:a6:6e:64:3d:ac:
2b:e6:c0:4b:3a:36:7a:40:87:f2:2b:eb:fb:95:fb:
77:b7:00:28:c1:ce:72:c1:d0:5d:53:cf:ff:a0:31:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:44:B1:FA:67:E9:8E:CC:9E:E1:C6:1B:7F:51:FD:C1:34:AA:F0
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ca:6d:65:60:6f:7d:6f:51:1b:92:58:aa:e1:2c:c3:22:2e:
2c:ef:aa:e8:dd:7f:75:47:31:fc:a8:b2:d8:93:6d:49:2c:63:
74:0e:0f:db:ef:da:4c:09:1e:a9:10:0c:2c:1f:b3:dc:db:1e:
8b:50:87:78:bd:8e:5f:c5:d7:24:72:5c:a3:43:02:12:e1:40:
79:86:64:87:f9:ad:cd:22:81:0d:ec:d0:84:de:16:81:56:a9:
ea:04:3d:2c:02:4d:8a:27:71:5a:d3:05:f9:5d:12:f0:ce:c0:
e6:73:66:ff:94:df:b9:b3:c7:86:ca:0c:a7:c4:b6:a7:2b:2a:
0c:2d:6a:dd:5c:2f:c9:18:0e:e8:e3:cc:52:d1:e7:d4:ec:91:
9f:ee:24:94:1e:bf:ea:f7:10:ae:3c:bf:a3:56:5a:e9:64:44:
73:9d:64:a0:b1:0d:f5:d6:36:6a:2c:2f:6b:c2:aa:35:86:da:
42:39:76:a8:c0:75:86:1d:4a:ba:b7:22:60:0e:6f:0c:57:c1:
eb:e5:15:6c:51:9a:99:c2:a2:8b:d6:9f:5e:24:25:70:bf:c7:
33:1f:cd:2e:05:74:fd:92:99:34:d1:38:3d:3d:5b:2d:b2:49:
08:c3:f0:d6:04:49:c7:d6:ab:8f:15:cd:ae:3e:5e:f7:09:90:
14:ae:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:30 2025 by rpki-client