Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: JEcY3HYnmxwltMCHVf2yxX8ESBjf5qDP0GFSYEKrZJQ=
Subject key identifier: 08:F2:5F:77:A5:19:E4:F4:FC:94:1D:85:70:4D:88:57:72:0B:6E:09
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 0198D54DBFF2B3E00FCA4CB865145BA503BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0FEF
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: DtQlZdLbBrKz0M0Cl5w0xRWGx+SvTLXBjmm/pE/mjqw=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:bf:f2:b3:e0:0f:ca:4c:b8:65:14:5b:a5:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=08f25f77a519e4f4fc941d85704d8857720b6e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:e8:3e:cb:e1:8a:b5:b7:ab:13:f4:eb:96:
6d:dc:41:50:09:1b:b5:6e:17:0d:77:dd:b3:35:f1:
62:d7:5e:59:80:62:1a:16:13:70:f1:4c:c3:9a:4c:
86:66:26:93:47:89:5d:c5:ae:e3:71:1c:5d:2b:54:
74:a8:8c:5c:3a:9b:f4:80:af:15:5e:c5:45:ff:29:
1d:5c:d8:19:db:f3:ee:83:3d:9e:9e:b4:e7:e7:01:
09:b2:55:b2:58:04:77:d0:22:8d:30:b8:1f:77:c8:
aa:f6:55:3b:21:81:0f:af:e8:b1:8d:d1:3f:77:ad:
03:1c:cb:0c:ab:36:57:77:bb:73:a8:31:06:62:2e:
c1:e2:6b:05:f5:1a:b2:fd:69:56:24:dc:28:00:2c:
66:b7:f1:1a:78:9e:6c:74:4f:e5:e4:41:85:8c:ef:
41:7e:2e:03:9d:72:cd:97:37:77:5b:6f:e1:70:60:
9c:dc:34:a9:ed:3e:fb:90:9d:61:e8:cf:37:7d:fa:
e8:79:f2:c0:ac:11:b1:72:db:1c:af:1c:a0:51:12:
ef:72:2b:d7:22:8a:31:9f:8e:a0:d5:c0:1b:e9:03:
d2:1a:0c:e8:eb:52:49:e5:5d:dc:77:94:91:22:75:
08:9d:04:d1:00:b7:0a:eb:b1:46:03:3d:0c:a4:5d:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:5F:77:A5:19:E4:F4:FC:94:1D:85:70:4D:88:57:72:0B:6E:09
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1d:8c:f5:2c:5c:62:9d:a8:ad:4f:01:73:62:87:94:df:76:
b3:d3:d9:06:22:a7:0d:1a:24:5d:c9:4c:f7:9e:68:af:d1:17:
d4:fa:8d:f1:f2:5c:32:3a:56:06:e4:b4:b0:49:15:8b:73:51:
93:f2:e4:a6:46:2b:b4:4c:71:2c:4a:79:74:92:fa:53:e6:e5:
fa:9e:a4:d8:fa:b0:26:d8:9e:86:24:2a:05:6e:f7:07:d5:99:
95:58:d6:3e:c2:e3:47:e9:31:b9:5b:ae:dd:4a:47:ba:c1:62:
2c:60:9f:22:68:fb:dd:ce:43:f2:05:5f:da:d6:a6:dc:93:9f:
a4:c3:40:c0:35:f7:09:68:ba:91:92:ff:32:f1:79:e5:5c:69:
43:95:df:a0:41:fe:84:04:c4:6e:b7:00:3f:33:57:e4:5f:c1:
0a:52:9e:8d:8a:6f:8e:48:14:da:47:d0:cd:2c:56:ee:74:86:
dd:c3:95:76:66:c6:6e:0a:ff:ab:e1:97:8e:89:f1:12:17:a6:
be:84:77:93:88:66:8b:d1:47:bf:49:34:61:f1:6a:50:a9:77:
fd:e0:59:aa:bb:a2:23:29:f0:d8:b6:a7:b2:78:1f:66:56:8d:
1c:d8:2b:55:2a:ac:56:4d:f9:71:7f:49:17:4c:16:d2:07:b2:
9d:d6:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client