Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: WmKxwArpSbFwLbyWHrvE66HL95YFS7AcnMf0f4hUuJM=
Subject key identifier: 8F:58:DF:51:A4:AF:70:DB:91:71:7B:6B:32:97:C6:19:45:26:00:33
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0198D4A802F1842FFF95C7148E5660944527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:37 +0000
Manifest this update: Sat 23 Aug 2025 02:00:37 +0000
Manifest next update: Sun 24 Aug 2025 02:00:37 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: hu2xApqhzPMmpe+ZjS7DeB/ziUtSQ0xFahhXuzh9Ac8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:02:f1:84:2f:ff:95:c7:14:8e:56:60:94:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Aug 23 02:00:37 2025 GMT
Not After : Aug 24 02:00:37 2025 GMT
Subject: CN=8f58df51a4af70db91717b6b3297c61945260033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:0c:c2:72:27:c6:15:df:52:c2:3b:b4:ff:
fa:f1:0f:44:7a:74:72:51:23:29:c2:33:72:ac:dc:
4f:0a:46:b9:7b:f9:28:cb:c6:e4:9c:01:62:95:9e:
bb:68:b4:12:d1:c6:7a:33:c3:22:9d:6c:55:36:63:
26:94:b1:70:26:10:dd:b6:e5:5f:b5:ef:02:25:24:
ad:0f:85:c7:c8:29:6c:61:30:2b:16:9b:20:d1:61:
20:03:72:ad:74:97:dd:0c:dc:eb:d9:4c:03:8d:4d:
ca:c0:d8:33:bc:0a:64:e2:da:03:6d:cd:78:58:21:
59:db:f1:3b:d8:87:1a:a8:cd:7b:57:da:dd:8e:3d:
25:11:28:e2:5b:e8:fb:bf:cd:6c:26:13:23:b6:b9:
71:63:ae:bf:77:4a:0f:44:2b:e0:18:e9:b1:8a:b4:
ae:bd:c4:61:62:ba:86:17:ca:4c:f6:d5:7f:37:8c:
f2:a4:cf:13:c5:17:1f:0c:b5:36:bc:cb:0f:14:63:
d6:b7:ba:f5:bc:89:ec:9d:39:97:c6:88:2b:cb:58:
1d:92:ef:ac:ca:0e:76:f4:8b:99:32:9d:80:83:fd:
bf:46:5a:ac:ab:da:b7:e8:52:cf:3b:db:25:eb:e4:
de:7c:c7:ac:7b:9f:59:17:06:fd:34:10:ee:69:a2:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:DF:51:A4:AF:70:DB:91:71:7B:6B:32:97:C6:19:45:26:00:33
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:33:2c:c9:73:fd:5b:80:32:e2:77:45:56:02:06:11:93:
9d:74:56:5c:bb:4c:ca:d5:6a:b5:91:b5:7b:48:1f:78:25:25:
56:e0:f5:ce:8f:91:b2:2d:11:cd:ad:12:01:13:0d:50:9a:a8:
05:a6:25:73:1f:0f:71:0f:a0:c1:b0:3c:35:b0:d4:e3:b9:d9:
0c:66:82:23:50:ad:7e:16:ed:89:1c:32:a8:c9:89:f9:86:27:
16:67:a6:7d:10:4a:15:a8:7c:f6:5b:59:ec:26:60:27:5c:1d:
50:32:8e:16:03:32:3f:9f:f7:cc:c8:ec:11:64:5b:f7:db:95:
18:97:f3:d4:e7:21:d5:53:37:3e:ff:25:b9:09:1e:a0:7c:b8:
12:42:a6:3f:88:0a:d7:78:53:a2:57:4a:d0:26:4c:eb:42:ab:
32:73:06:b4:c9:81:11:6a:94:42:81:f7:66:b7:27:ba:66:90:
51:58:c6:0e:ee:83:90:51:4a:4c:33:a0:9d:9a:9a:ff:27:9f:
56:54:d4:01:62:17:6f:a0:95:64:2c:00:03:12:bb:fc:71:f0:
e1:58:0e:55:e0:60:76:7d:8d:03:50:be:3d:60:bb:c7:09:8d:
8d:40:9a:bf:0e:93:c8:a7:73:94:43:40:f6:6b:8c:0a:7d:5c:
d0:a3:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:42 2025 by rpki-client