
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: fc205xTZcA1wlzMYt+VN3OcuEqCyUkKloTC+A1TcymY=
Subject key identifier: 54:7E:CA:33:5B:C0:4D:6D:B1:8C:65:96:24:CF:11:3A:8D:52:4E:99
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0197C80220201E2BCB9DE7AA3629756EC5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 22:01:11 +0000
Manifest this update: Tue 01 Jul 2025 22:01:11 +0000
Manifest next update: Wed 02 Jul 2025 22:01:11 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: hQvoIQd0ygoONspGahR8lxQeIDA5tlQqZjsc3BdY5PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:20:20:1e:2b:cb:9d:e7:aa:36:29:75:6e:c5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jul 1 22:01:11 2025 GMT
Not After : Jul 2 22:01:11 2025 GMT
Subject: CN=547eca335bc04d6db18c659624cf113a8d524e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:db:d7:93:9b:68:97:4f:5c:96:f6:3e:da:
7b:9e:9f:65:f9:49:c1:a3:ae:d8:0c:62:31:82:36:
4d:49:e0:a4:a9:df:cb:0e:a5:e7:1c:bb:e8:2e:fd:
67:c5:b1:43:c2:4a:91:3a:fe:cf:cb:b5:89:cc:7a:
a6:77:60:9c:ae:b3:ca:bd:bd:8c:91:15:13:77:74:
a8:28:ae:54:c2:7d:78:93:f8:c4:7b:29:4c:21:da:
71:3d:4c:d8:a9:ad:6f:58:c1:49:65:e2:c1:c0:45:
b3:12:22:40:38:e9:08:80:c7:74:24:8a:bc:35:48:
25:67:00:4c:7f:64:17:5d:30:1b:7c:2c:01:07:d6:
e6:a4:cb:30:8f:68:4d:33:22:8a:a5:2f:d9:1a:92:
88:f0:98:70:98:2a:4f:f0:8b:ad:08:f9:b3:1d:c5:
b0:5e:2f:4d:1f:78:56:cd:3b:34:f8:53:ed:7f:9e:
16:07:a8:50:7f:f6:49:ee:59:31:f1:3d:b8:af:3f:
7d:c4:f6:2e:ee:5f:7c:84:6e:73:9f:b9:51:5b:e0:
b8:b0:e2:7b:0a:10:06:18:bd:f3:81:2d:ce:b7:72:
2a:a7:09:13:8d:ad:44:76:a1:da:c6:b2:4f:50:8b:
f4:0c:a2:12:c2:09:b5:fa:71:e7:a1:e3:88:c0:99:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:CA:33:5B:C0:4D:6D:B1:8C:65:96:24:CF:11:3A:8D:52:4E:99
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:fe:1b:18:4c:33:f8:f3:7f:ad:da:fc:37:07:9f:59:df:
74:69:c5:9e:67:c0:cd:5e:99:dd:72:9e:c2:77:3e:1b:62:c8:
db:ba:7d:b8:29:b9:55:c7:53:a3:92:b9:fe:47:76:e8:74:dc:
d2:3c:46:b4:ad:20:5c:13:0f:d8:16:d3:02:cd:d1:73:8f:5d:
1a:47:3e:03:7a:30:6f:b0:c6:ed:09:e9:e1:b9:12:84:ea:2e:
b9:b0:bd:2b:e3:7b:b3:6e:f5:87:70:54:af:62:5e:ad:ac:03:
a0:9a:f3:39:29:7d:20:02:85:7c:8d:7c:00:07:dc:a1:6c:a1:
05:9c:5e:11:d6:c8:1f:2a:22:3d:1e:fd:76:ce:2a:86:c3:c0:
59:67:65:d1:f2:66:62:23:f5:31:99:8b:ad:c2:29:2e:d1:30:
07:8b:7d:08:04:4b:c5:87:33:00:6f:ba:55:19:18:9b:e1:fa:
f9:0f:f8:27:a5:21:9a:1f:cd:bd:71:74:e1:8e:53:a2:24:42:
7c:74:46:36:e1:3a:57:6f:e1:ec:01:72:ae:63:8c:51:77:30:
5d:7b:4e:7f:2f:bf:bf:7c:73:af:7c:d8:bd:73:12:21:1e:fb:
50:eb:81:cb:13:48:ed:97:90:ce:98:51:2f:a2:58:42:e9:ba:
4c:c6:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:32:19 2025 by rpki-client