Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: XMfAZVjYc1I7lvPqdeyBkhr3e6xJxhHEn8wY9CcsBMI=
Subject key identifier: F8:87:A0:B0:D1:D1:44:13:19:48:FB:CA:2D:AF:93:58:9A:2C:58:BA
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 0198D515D02105C3A87921BBAC5A4303365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 075F
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: PQ/ormisF+yux+s16sUaIbw0gdSZzOfD50XTOgKzUfU=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d0:21:05:c3:a8:79:21:bb:ac:5a:43:03:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=f887a0b0d1d144131948fbca2daf93589a2c58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:ad:a0:ae:c6:be:84:51:89:ee:23:81:ec:
86:4b:d1:92:33:d2:a2:c3:75:d8:16:44:53:16:55:
cc:ec:95:a5:b6:13:7f:b0:58:21:fc:6d:28:ef:36:
c3:c7:36:e1:7f:0c:40:54:d3:d4:02:7d:87:67:c1:
c1:d2:9a:d4:e7:ec:c3:98:a2:b9:9f:ad:f0:4d:e0:
6a:79:ac:5d:3d:5e:35:e0:7d:fb:e2:7a:52:fe:e3:
be:6f:a3:52:4d:51:c0:5f:4e:e6:47:7f:70:2a:b5:
a0:fc:4c:a3:f4:ed:4a:98:e2:7f:8f:99:1f:c1:03:
80:b2:95:56:64:26:2d:bd:b5:02:4d:c4:29:39:a5:
cb:f4:57:d9:b0:2e:a8:40:d3:e9:de:e1:5c:c0:d5:
c5:7d:f0:46:5a:01:da:4c:8b:38:97:67:da:39:64:
3e:59:62:1d:df:2f:f6:aa:83:b2:54:af:c5:99:ff:
e4:e1:7c:0b:57:9a:33:73:d8:a7:63:00:8e:41:cc:
82:95:df:1d:28:f3:2a:22:53:57:e4:95:82:d8:8b:
c3:6e:fb:d1:ea:f6:97:77:f5:bd:fb:f2:2a:40:c6:
06:fd:18:c5:ba:e9:ae:93:ca:5f:46:c1:60:33:14:
2f:7d:86:6d:ed:f2:88:9d:db:9b:60:a2:5b:a8:70:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:A0:B0:D1:D1:44:13:19:48:FB:CA:2D:AF:93:58:9A:2C:58:BA
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:bc:72:f3:7a:d4:d9:bd:be:2f:52:02:c7:36:0e:52:45:
4e:4f:ca:ca:38:44:9f:6f:3b:a2:f9:a6:7c:df:7e:1a:7e:e8:
88:0e:68:7e:a1:93:a5:0f:fa:91:ec:9a:f6:0d:c9:b6:a9:34:
87:ca:6a:af:b7:76:e9:28:72:aa:92:cb:31:a5:d5:48:77:62:
14:3f:34:b1:de:31:df:b1:f2:bc:b9:03:be:cd:99:30:d9:70:
b6:5c:3d:3b:b9:02:22:f2:8e:86:e7:74:d8:64:04:68:b2:d0:
b0:52:5d:c8:e9:76:71:a5:a8:cd:95:7b:84:c8:5e:9f:fc:db:
bb:aa:98:39:66:c0:a9:ca:62:e4:71:f3:0b:e2:57:67:bb:cf:
c3:2b:6c:fc:8f:f1:7d:ee:06:ae:8f:7a:c5:14:12:0c:08:21:
5d:c9:e0:c6:81:fa:da:7a:5f:07:6a:3d:21:c6:52:8b:d5:23:
30:71:85:e0:29:b3:cb:fc:90:d9:7c:18:ac:34:e3:85:07:cc:
06:8b:57:a0:60:1f:19:3d:47:fa:9f:71:07:b6:fc:0c:54:47:
46:7e:37:15:c8:51:02:ed:6b:e4:81:ce:4d:8e:c0:1d:34:88:
44:5e:21:ad:c6:d0:0b:df:f6:46:d1:df:b2:cf:3b:f1:7d:68:
a0:64:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:25 2025 by rpki-client