Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: u3Ol47FvKl8K1cB8gzI8OVcGoaHQfhABsswvWW67OBk=
Subject key identifier: D9:4E:C1:B1:4B:04:77:B9:77:E1:F4:11:BC:FC:DB:58:71:3F:D5:62
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 0198D4E040D028956CCA8C015F47757262B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 0667
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: 2ZLCvT72wUbjzCeXGUQDkzwApONxaBHkbwhsPMpd2nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:40:d0:28:95:6c:ca:8c:01:5f:47:75:72:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=d94ec1b14b0477b977e1f411bcfcdb58713fd562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:f0:f0:81:01:89:7e:75:24:32:8d:b2:01:
67:0f:be:40:0f:c3:0d:f2:cb:83:32:fc:ed:61:0c:
0c:bd:21:eb:ba:64:f8:7f:48:d6:43:90:6e:6a:27:
a2:c1:bd:06:8e:5a:29:cb:fa:49:f3:b9:da:78:90:
d0:86:c4:47:21:55:0e:ea:24:84:60:ec:13:30:ea:
5b:47:99:e1:49:80:e3:61:d2:80:89:f9:d8:ef:19:
26:31:2b:45:a6:9b:14:7a:60:5c:91:80:4e:de:2b:
c7:3f:d2:41:9f:24:1e:f9:02:62:a4:7d:94:82:f3:
04:3f:4f:62:b8:ac:27:7e:51:fe:6d:1f:67:55:fb:
aa:cf:8c:4e:f7:3f:16:54:03:4e:a7:23:d0:ab:80:
19:96:6d:6a:4d:c9:b2:9f:2d:39:3d:fb:a4:ba:ff:
40:1d:aa:9d:83:17:69:48:21:7f:e5:de:55:b3:fd:
4d:14:62:9c:4f:3e:8a:60:1d:43:ff:11:81:fb:04:
23:47:ba:cb:9c:54:5d:4f:43:42:74:40:ad:24:76:
38:8f:b4:11:2e:59:d8:fd:dd:d6:5c:e3:da:33:3f:
05:0b:27:40:ae:1b:d8:3b:56:da:c9:41:c5:6a:a5:
ae:36:fd:f3:f6:f1:b2:0a:32:0d:62:14:7c:50:db:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:C1:B1:4B:04:77:B9:77:E1:F4:11:BC:FC:DB:58:71:3F:D5:62
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:96:22:80:8e:ab:ac:f0:64:4f:8a:3c:c1:08:9e:bb:bc:
13:6e:14:7f:59:8e:28:ee:ef:23:60:a2:85:6b:e2:7b:0e:eb:
ae:0b:15:10:64:9a:be:c4:60:8e:0c:e5:ce:93:d1:41:57:0c:
58:ee:1a:21:12:49:18:15:eb:3c:6e:c0:3b:da:d3:2b:a1:78:
a9:96:23:a9:11:14:c9:62:ae:ad:5a:59:87:59:3f:9e:91:3e:
36:8d:9d:a5:bc:54:35:4b:6d:1d:19:15:55:51:44:d2:6f:49:
ba:cc:7f:de:c4:4b:82:30:6a:10:79:4e:c1:2c:2a:11:08:0a:
33:5d:dc:43:23:00:a9:1f:4b:fe:71:f4:fc:cd:7b:82:11:f0:
88:3a:db:87:5c:fd:02:21:61:19:0b:a4:89:a2:2e:ee:22:ad:
bd:4c:ea:5d:32:71:b0:f5:5e:a4:21:dd:e1:f5:14:1d:2d:a4:
38:0d:b6:47:ca:16:cf:62:06:fd:85:fd:58:ce:5e:1a:34:25:
93:b3:a4:2b:89:e5:0d:b9:aa:54:e0:b2:5d:64:d7:ba:ef:e6:
14:0b:a5:af:7d:e9:2d:50:91:56:9b:b2:11:45:bc:12:1e:4b:
1c:e0:e1:ce:0c:aa:50:5c:ad:8e:e7:10:6e:74:f6:1b:2b:72:
b6:f3:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:45 2025 by rpki-client