Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: CiF/tIPpvqAbDuYcYsycy/iKbxuN6KQGLxC8ynfPEmU=
Subject key identifier: 32:42:7B:6F:3D:DD:2B:06:A6:B1:BE:E4:06:97:61:AB:CA:76:73:EB
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 0198D5BB885E917B096E9EAC8ED622AAC968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 11CD
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: FbdS3mWNkwLxtFq7e58DKyo3ixFHFzV7vCglu0zTIic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:88:5e:91:7b:09:6e:9e:ac:8e:d6:22:aa:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=32427b6f3ddd2b06a6b1bee4069761abca7673eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:37:7e:4a:66:37:ff:cd:88:85:6a:9a:71:
cb:dc:25:92:7a:11:07:7d:b4:7f:34:5c:2e:63:60:
16:db:d5:9b:10:0c:1a:6a:8b:2e:dd:29:43:3b:5c:
9e:df:9c:67:30:6b:c0:fc:bf:89:8a:ff:0e:cf:51:
c2:52:82:d2:4c:4c:81:4d:84:dd:e5:48:1f:de:11:
91:09:7d:f0:53:b9:b7:6a:c6:f4:81:48:36:a0:e9:
97:21:fa:37:dd:c2:62:16:a5:b4:4e:7e:57:b0:d3:
43:f8:13:5e:a9:70:01:41:ab:25:f2:72:fc:72:59:
83:37:f9:bc:75:da:e7:0e:ab:32:62:b9:0e:bf:81:
83:79:7d:f7:0f:ab:33:e0:ba:d7:0b:73:d3:56:27:
ef:80:21:2b:39:ea:7c:96:eb:b5:46:24:c1:bd:c5:
12:c8:5f:ff:c9:9e:e7:39:48:b8:fd:05:7e:5b:bd:
67:0a:3b:42:c7:20:f1:fb:82:74:e6:d9:88:81:50:
6f:3f:b8:5f:4a:0f:ab:cf:a6:c0:85:6b:23:9a:96:
66:68:92:61:4c:54:1f:23:4c:88:63:b3:71:09:c2:
6e:62:00:84:bd:21:6d:81:c0:6d:b4:f5:ed:f4:a3:
a9:a3:ad:82:2d:26:42:86:9e:0d:8c:a4:9e:6d:24:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:7B:6F:3D:DD:2B:06:A6:B1:BE:E4:06:97:61:AB:CA:76:73:EB
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:11:db:5b:42:d6:3a:2e:e2:d1:6a:af:b4:27:95:8e:f2:
fe:fc:da:40:5a:85:d9:9c:b8:3c:c5:19:38:3f:27:60:7b:a2:
e0:fb:5e:e4:8e:80:b1:6d:69:6d:39:34:21:41:8b:ee:ca:55:
58:bf:96:be:5c:d2:d7:70:db:94:fb:86:3e:a0:5c:31:fe:67:
66:ed:da:a9:6c:20:3c:ba:14:f5:00:6e:2a:5b:42:c9:47:86:
13:15:b0:5d:d8:9c:33:e1:02:c6:6e:fa:3e:f6:1d:f6:88:a7:
07:82:f7:35:12:c1:c6:e7:ea:7c:c6:5d:5a:2c:bc:ad:c1:d7:
e9:6a:74:e2:ce:d1:84:b6:2f:44:31:24:eb:1f:13:e1:ca:50:
7f:cc:1a:59:d4:8b:e5:21:82:27:54:77:b7:a4:9b:6d:b5:de:
27:5f:8d:a1:c1:59:e2:b6:c8:5b:dd:45:85:db:12:31:88:1e:
8a:d0:78:5f:f6:df:be:e2:ad:cd:87:c9:f3:ab:68:d6:fb:2b:
cb:7e:2d:b7:75:4f:c9:4b:ec:33:4e:90:99:e6:6e:34:64:74:
f3:13:e9:fd:0e:0a:20:f8:2d:a8:91:88:ba:26:14:4e:2b:24:
88:c2:f2:61:ea:7c:b0:dc:77:ad:f5:a5:4d:35:0d:9c:84:a5:
52:56:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:50 2025 by rpki-client