Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: b2hHf9FTthTfhvwAuiJn4MNbEmMzt8TFo7u9G0cYXoc=
Subject key identifier: 43:17:91:F1:A3:AE:2D:73:43:73:7C:E9:FE:15:36:65:21:63:50:C1
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 0197CC4CF39DFA604FED07F45F28D6ED3A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1552
Signing time: Wed 02 Jul 2025 18:01:24 +0000
Manifest this update: Wed 02 Jul 2025 18:01:24 +0000
Manifest next update: Thu 03 Jul 2025 18:01:24 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: XBdLvhM70rjat2WoR3cydo/QFHypdnpr0P8KBSnnojo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:f3:9d:fa:60:4f:ed:07:f4:5f:28:d6:ed:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jul 2 18:01:24 2025 GMT
Not After : Jul 3 18:01:24 2025 GMT
Subject: CN=431791f1a3ae2d7343737ce9fe153665216350c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:20:aa:85:5a:7a:d6:15:5f:ac:5f:08:54:
81:81:e9:da:f0:2b:12:bd:9e:12:f4:66:30:3d:56:
8e:50:60:49:b3:4b:43:c4:b9:df:70:80:ed:94:ec:
09:86:91:68:90:42:97:db:0d:d0:31:f9:c2:fd:ac:
b9:87:d0:c4:37:a8:42:7f:6e:c8:f7:44:90:ba:1a:
00:2a:20:02:f2:28:66:3d:92:23:c5:37:a8:fd:32:
9d:02:54:83:3e:70:cd:ec:4e:da:4c:f4:cc:72:10:
93:db:94:ce:e9:a6:7d:38:c6:98:19:ea:92:01:53:
63:fd:6e:cc:dd:f2:23:1d:6e:1d:8c:a6:6b:2e:55:
7e:e1:1e:3f:b2:a2:ed:53:d7:9b:dc:0a:73:38:1d:
ee:00:61:b2:1d:e4:7d:df:d5:46:cb:c6:f3:40:d2:
44:fd:e1:cd:67:33:fa:2c:8f:f2:86:6e:05:62:1a:
65:48:34:ff:c9:2d:28:e0:50:1b:a1:29:9f:c1:b7:
78:1c:5d:16:cb:4d:83:14:04:d0:a6:be:52:e9:48:
7b:94:bb:8f:76:74:8a:f9:72:4c:0f:73:89:ab:2b:
89:4a:63:0b:cd:a6:f3:2c:f7:24:5b:f8:2a:ad:31:
8f:f7:80:92:ef:74:ad:3a:fc:ee:17:17:9d:95:d4:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:91:F1:A3:AE:2D:73:43:73:7C:E9:FE:15:36:65:21:63:50:C1
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:ac:18:80:df:b3:4a:df:e6:f1:59:5c:78:fd:4d:4a:44:
e8:5a:89:ff:e1:df:70:11:34:35:9c:1a:f5:91:fa:7d:08:dc:
18:13:53:d9:3c:f0:52:bb:80:ab:b2:9a:fe:ce:5e:3a:84:38:
6a:e5:67:60:13:3c:9d:83:b0:43:6d:9f:8a:4f:a2:16:30:51:
57:57:9e:3b:43:7c:39:0c:73:dd:99:50:30:d7:41:70:56:0a:
97:8f:a8:61:79:2d:26:f4:84:13:61:53:65:5f:aa:7f:41:3d:
f7:c0:35:69:4d:a4:9c:41:05:f6:ef:46:63:1e:9b:fd:2b:98:
1e:55:2e:60:3b:cb:cd:37:dc:40:f2:59:ad:26:4b:45:d2:72:
97:93:f8:4c:5d:8a:cb:f9:e6:67:ee:60:42:72:a4:d1:81:6f:
06:15:5e:2c:fd:d7:5e:53:95:10:fa:e4:40:f7:3f:f2:a4:3a:
fd:7b:f1:71:a9:1a:42:66:61:df:81:f7:e5:3b:8c:86:fe:a0:
ab:2a:a6:90:6d:55:46:bb:66:1a:81:5f:3e:6f:5f:ee:b0:e6:
bf:e2:3e:69:94:40:fa:94:9b:66:b4:60:53:69:88:e1:98:f4:
86:38:14:e0:00:e6:6d:6a:2e:c7:c1:68:e3:2b:8e:55:dc:37:
bb:02:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:59:39 2025 by rpki-client