Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: 9xPYHVjXqam45IWoW5obazqsjMTMDHnNJez0SUlXPxY=
Subject key identifier: 4C:9F:FF:CC:23:16:81:37:51:36:DF:12:62:9B:3B:12:18:31:60:3F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0198D472EA51DC3B5161F88BB5E76EE2534E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 16CD
Signing time: Sat 23 Aug 2025 01:02:37 +0000
Manifest this update: Sat 23 Aug 2025 01:02:37 +0000
Manifest next update: Sun 24 Aug 2025 01:02:37 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: VBHemTse8PlmEJXa4JrCmHKTf4erOVRaaEqniwXP8+A=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ea:51:dc:3b:51:61:f8:8b:b5:e7:6e:e2:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 23 01:02:37 2025 GMT
Not After : Aug 24 01:02:37 2025 GMT
Subject: CN=4c9fffcc231681375136df12629b3b121831603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:3f:1f:bc:22:d8:61:81:16:4b:18:8f:ff:
b4:b3:f0:22:5a:79:c6:4e:f8:61:6f:11:ad:ab:43:
d3:14:06:ce:9a:4f:33:f2:74:40:52:ef:31:e8:00:
51:5f:7f:72:a5:40:26:b1:0f:99:8f:7d:42:cc:f4:
a3:d0:46:b2:f8:18:53:d9:35:65:1f:be:b4:72:57:
85:5b:36:c9:2c:9c:97:ec:5b:4d:7a:3c:f6:df:e8:
38:2a:28:ba:2f:8d:34:3e:4a:2a:79:2e:b1:fa:8c:
b3:78:df:01:e2:37:4a:f0:c2:48:7e:61:27:51:b9:
4c:b5:78:5c:02:63:20:98:5b:92:aa:5e:90:da:ce:
70:d7:9c:40:63:5c:9a:ac:bb:6d:f7:58:0b:a0:1b:
b6:1b:7d:fa:65:e4:43:d5:e7:61:63:60:6f:f6:49:
d6:cc:b9:bb:2d:22:bb:90:00:ea:cd:68:f4:58:0c:
45:6c:4e:1f:e1:9d:8e:97:6c:39:ac:f6:ce:e4:6f:
d3:86:75:b5:aa:ea:e3:a0:c3:3d:64:3e:49:6d:03:
b0:fc:7f:74:c0:aa:18:1c:1c:9b:37:b3:9a:45:35:
5f:ea:4a:38:cc:b7:06:ae:c2:f3:a7:25:6a:33:be:
76:80:09:1e:4d:a3:b7:24:27:bc:0c:83:bf:68:5f:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:FF:CC:23:16:81:37:51:36:DF:12:62:9B:3B:12:18:31:60:3F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:a6:25:9d:0e:0a:20:d4:70:ff:a8:ed:47:74:95:73:78:
2b:d8:4a:ca:16:f0:8f:82:c7:e7:58:d9:0c:58:aa:65:27:2d:
00:08:37:ea:3c:f4:11:e2:c2:27:78:69:37:11:b1:c1:e3:2b:
c0:03:41:01:37:11:7b:85:51:28:99:34:0f:4f:74:b2:a5:d0:
22:cd:98:d8:aa:2b:98:fd:71:ae:1c:46:25:5b:f0:22:ff:88:
1f:cf:70:92:6a:c1:24:fd:0a:bc:b1:35:6d:63:58:33:4e:b8:
96:f6:3a:a3:c5:29:77:b4:83:2d:13:8f:84:10:42:ca:ee:a9:
13:86:84:2c:fa:e3:38:cc:38:12:84:28:eb:d5:e2:88:b0:e1:
1c:09:e0:ef:8c:94:f3:c1:2e:15:b0:61:26:07:f3:51:6a:d0:
36:71:4a:59:b4:f1:e6:f8:ea:53:1f:73:6d:e4:25:7a:94:cf:
7c:e4:6d:39:4d:1a:df:6c:6b:2e:0a:61:90:61:92:a3:66:05:
91:9e:4c:2a:4c:f2:2e:86:31:d1:b2:37:99:9b:fb:ad:c3:3d:
58:29:26:28:f7:24:a0:a7:a9:f1:b4:fa:95:02:2e:81:f3:2f:
6d:c5:7f:7a:58:e6:d0:b7:73:bc:51:20:8d:69:b3:ba:82:b1:
bb:bf:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:04 2025 by rpki-client