Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: y+QrB7R1pKbi7EXTSkm9caOX9d7UNmtl1hJOs4riFIE=
Subject key identifier: 72:A3:96:14:3D:88:B1:91:44:8F:81:A9:32:D4:4E:65:FE:36:B6:19
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 0198D6CD6F3087A834D17C416DF30D7C029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 12:00:44 +0000
Manifest this update: Sat 23 Aug 2025 12:00:44 +0000
Manifest next update: Sun 24 Aug 2025 12:00:44 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: rcwU5OGfRDVf8HXABH6Jq0cjLWcweYsz/g5wz45YYSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6f:30:87:a8:34:d1:7c:41:6d:f3:0d:7c:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Aug 23 12:00:44 2025 GMT
Not After : Aug 24 12:00:44 2025 GMT
Subject: CN=72a396143d88b191448f81a932d44e65fe36b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:9a:fc:8a:47:65:49:be:d8:bb:77:a2:22:
b9:c5:da:ee:2b:e9:7e:93:9c:5e:c2:4f:ec:71:ef:
0e:33:7b:fb:14:a4:7d:68:71:c0:84:ec:38:c6:f6:
e4:03:ca:03:1d:b3:c8:8c:70:98:36:1b:a4:d9:9b:
a6:75:7a:e1:b2:6f:2f:39:c3:e3:f3:95:93:30:19:
df:b7:9e:fa:84:84:a2:79:64:e9:14:e3:62:89:dc:
41:3c:c7:88:cc:16:55:1d:9b:a0:0c:e4:11:c4:10:
d5:8d:3e:0b:8f:12:55:73:4e:7f:36:4b:af:76:e7:
ba:a1:bd:4d:5d:be:df:d4:14:84:3d:ec:21:fe:ce:
8d:6c:a0:0d:6a:bf:af:e9:e2:2a:59:c7:42:4f:a2:
1a:d1:4d:10:de:79:cf:fd:93:47:18:42:f4:f0:da:
df:5c:12:3f:d7:4f:ed:81:58:d1:96:5a:68:33:33:
f1:d5:59:2d:ab:d3:8c:04:4f:50:04:0d:53:d6:5f:
71:c9:ea:e1:39:4e:60:d2:a1:3e:16:e8:44:97:ec:
05:0f:2b:41:61:0e:ac:ff:24:22:2e:78:58:e0:61:
a0:92:cf:da:5c:90:7d:f3:8e:38:bd:8f:4a:57:8a:
e6:cd:2e:5a:9b:99:43:b7:44:48:44:86:7d:69:60:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:96:14:3D:88:B1:91:44:8F:81:A9:32:D4:4E:65:FE:36:B6:19
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:3b:66:59:c1:e1:56:4a:85:a3:b5:d1:95:c9:8a:dc:59:
d0:0c:b5:65:a5:e1:a1:2b:36:8a:f7:e6:c6:13:a4:e6:55:d1:
76:d1:0b:01:a1:2d:b1:db:8f:63:a4:3b:1d:07:65:9d:97:c4:
58:ad:7e:e4:88:0f:e2:b6:e0:3e:7d:03:15:d6:91:8f:5d:b1:
b8:7c:f6:9f:86:3e:f5:74:41:85:1b:7f:81:52:66:64:dc:3e:
68:d0:bb:c3:b3:fa:ac:2c:d8:dd:30:8d:71:d1:03:28:be:82:
a8:53:41:a3:c0:bf:1b:e2:05:00:51:a6:c2:82:3a:3a:c1:ec:
b8:73:90:05:54:38:e0:ca:db:78:3f:31:d7:40:84:bb:1b:8b:
9e:91:fd:72:5c:d8:b5:1a:ec:f3:1c:25:0f:83:c1:de:74:13:
7e:27:a1:9c:e4:fc:92:8c:9e:9e:92:2e:c7:ec:7f:78:4c:b5:
7a:6c:e6:f4:0c:43:e8:be:3b:da:21:b2:0e:c8:b4:39:17:a7:
fa:ac:8d:13:ab:e0:cf:da:11:96:86:93:95:d1:e7:2a:b9:39:
12:98:a1:27:80:f5:c1:ab:c1:0b:d6:fb:cf:81:af:08:58:18:
0a:e9:8c:c9:eb:4c:f1:7c:35:a2:a7:63:cc:28:b1:b0:f5:92:
d3:12:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:05 2025 by rpki-client