
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: w6vVx1YU+BDUZai44Cw1sBw5VuU5/S4swJI5oLPjTGw=
Subject key identifier: 4E:09:49:7D:85:12:9E:C4:45:67:42:8B:5D:70:8E:D5:39:4D:7E:62
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0198D51603C038B81689302C1857065113B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0D18
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: /0aSYXtkRfYJZNpDTcz4hfYAKuSA8Q4CtmdNallMx68=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:03:c0:38:b8:16:89:30:2c:18:57:06:51:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=4e09497d85129ec44567428b5d708ed5394d7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:bd:4d:ba:51:07:11:2a:f0:57:c2:f3:40:
7c:18:09:d5:c3:ec:a0:66:da:b7:50:08:df:98:fe:
df:69:89:33:ee:aa:0b:95:e8:23:31:a7:8f:95:a1:
0f:c6:60:30:cf:84:ea:b2:e0:90:93:31:46:bd:bb:
86:d7:59:8f:95:ff:65:6f:fd:cf:bc:f3:fd:b8:d7:
9d:f0:0a:02:65:48:93:05:b9:bc:cb:f6:27:65:d1:
bb:d0:3a:34:b5:83:bb:0c:d7:dc:09:23:a5:76:f7:
fb:c9:0a:e5:6a:99:89:4d:29:0f:f7:52:42:a8:cf:
c0:1a:3f:4d:d9:e9:46:41:79:e7:5f:14:49:b8:39:
1b:5e:0a:b3:e5:c4:31:c9:25:bd:f9:80:50:4a:a2:
bd:04:f9:48:26:ab:7d:cd:89:26:5d:be:12:2f:f0:
e5:a2:d5:dc:3a:df:68:34:6a:b0:1d:e3:b0:76:73:
82:a0:8f:ae:09:5e:e1:d6:9a:50:85:0d:2a:65:0f:
ba:91:18:58:6f:3e:41:fc:ef:c0:7f:74:0f:3a:b3:
c0:39:89:6e:b2:94:16:e8:b9:fd:57:56:b1:36:42:
98:b0:49:9d:e1:8d:f9:c7:4f:10:85:6a:2f:9b:f8:
96:ff:8b:f4:f8:d4:c8:a5:a6:ff:99:9a:11:ad:38:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:49:7D:85:12:9E:C4:45:67:42:8B:5D:70:8E:D5:39:4D:7E:62
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:98:32:c1:66:2d:f9:9d:c3:79:8f:2b:42:86:20:1e:cc:
a1:77:21:e6:8e:d4:a0:6e:6f:55:2f:4a:98:b0:f9:b6:0a:31:
08:95:43:da:de:5a:a5:79:c1:32:07:48:2e:54:96:0c:d2:ed:
72:47:94:c9:92:0d:c3:71:ce:76:9d:dc:da:00:76:eb:e3:e2:
5a:a5:87:da:93:2b:db:18:df:3d:12:28:17:15:e7:76:2b:c3:
87:3f:a9:66:7f:b6:da:b2:87:f8:5c:43:04:b0:f7:4c:f0:ca:
ad:ef:73:31:70:4d:15:dc:e8:ff:5d:7c:90:3d:58:c3:4f:ec:
76:0e:bf:f7:2a:96:a5:4c:19:ad:41:75:a4:55:5d:ef:48:ad:
ce:5b:6d:84:43:f0:53:9c:8a:99:94:ae:99:88:a8:91:52:00:
7e:e0:e8:e7:c3:ae:2b:9e:aa:da:ca:06:6a:5a:b9:9e:f7:95:
6f:60:21:e1:86:09:20:c6:df:e3:f2:23:3f:84:cc:ef:16:92:
08:58:36:a4:74:4f:1a:1c:ab:05:f1:73:21:50:78:b3:7f:fe:
45:8e:3b:b9:6e:70:12:98:6c:33:48:3a:9c:1f:c4:9d:5b:08:
0d:40:f4:4c:3c:48:a2:00:9d:c8:37:6c:49:d5:39:44:95:02:
f1:8c:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:43 2025 by rpki-client