Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: H+dD7XXgEELUHui70fl6dmjtM8NV7WZvVTzU3rRpkS4=
Subject key identifier: 37:87:85:0B:A5:A7:4D:39:E7:CE:51:D2:A0:EF:E0:41:47:28:09:C8
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 0198D4E0DEF68D7749B094FD3B4E9A156859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:02:43 +0000
Manifest this update: Sat 23 Aug 2025 03:02:43 +0000
Manifest next update: Sun 24 Aug 2025 03:02:43 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: Zv+Q5blgeZObuMX0AG5ItIiD7ST9WUJuWBmSfGp97m0=)
2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:de:f6:8d:77:49:b0:94:fd:3b:4e:9a:15:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Aug 23 03:02:43 2025 GMT
Not After : Aug 24 03:02:43 2025 GMT
Subject: CN=3787850ba5a74d39e7ce51d2a0efe041472809c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d8:aa:fa:5f:f9:42:fb:d3:33:fc:b0:a9:17:
4c:2a:e7:15:1f:7e:3e:14:ff:55:0c:bb:33:2a:8d:
ab:8f:64:ec:58:49:ab:8f:33:49:0f:8f:16:87:fa:
05:73:db:22:2b:3f:5f:66:0f:e9:c1:e7:14:d7:5d:
d1:fc:fe:75:ac:cb:5c:1f:a0:99:04:8e:a7:d4:67:
e0:68:8f:ce:14:d5:27:79:e6:f9:1f:03:b3:80:89:
a4:3f:9f:da:13:4c:5c:1e:93:57:63:6b:40:56:7d:
2f:f4:d0:f6:06:ab:8b:4d:69:09:d7:9c:05:aa:f3:
e4:82:44:a8:ef:d4:fb:85:51:42:84:f0:e1:3a:03:
62:7d:33:c6:65:3f:b5:80:9f:5c:e2:33:33:79:3b:
ac:10:bf:94:21:4c:f5:86:75:e6:84:cb:14:f9:26:
4e:81:31:41:e1:1c:f1:af:aa:54:02:92:f7:62:0e:
c7:09:7a:46:e1:38:e0:36:d9:6b:61:6f:e4:bb:99:
09:0b:63:2f:33:06:a1:71:92:22:35:57:9a:ab:c6:
8e:cd:95:ea:39:23:73:91:e5:84:24:0e:f6:78:9b:
10:0a:ed:e9:f7:d0:c5:5c:50:f9:7f:6c:5d:fa:e5:
fb:18:a0:9a:d5:1a:50:e8:c3:44:e8:4b:c2:35:3c:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:85:0B:A5:A7:4D:39:E7:CE:51:D2:A0:EF:E0:41:47:28:09:C8
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:75:f1:a4:66:14:c3:4f:41:5f:d7:26:b8:d7:61:60:c6:
45:9f:f6:1c:14:a8:c4:68:03:46:cf:f2:14:2d:e5:73:fc:eb:
0d:3b:cb:29:20:51:c8:32:f8:22:27:a1:9b:61:5d:d8:d5:7c:
8d:c0:f2:18:24:36:fc:b7:24:e6:99:41:2c:50:45:ac:ab:ae:
5e:67:2d:70:c5:69:78:2d:2b:7c:aa:e9:9b:49:1b:0b:f5:3b:
4c:cf:e4:e2:58:58:60:08:26:db:ce:aa:14:b6:58:d4:0e:15:
11:e0:23:cf:30:64:98:95:c5:64:03:a2:bf:f8:b0:32:56:5d:
2c:bb:55:c3:d2:d2:8a:55:23:d4:4f:ed:e4:3c:12:45:a8:58:
64:10:93:c5:41:8e:cd:62:97:74:cc:49:04:4a:0d:bc:76:8c:
f6:a2:d6:5b:de:5b:78:d4:1a:29:c8:a1:1a:de:7c:fc:a3:85:
ab:c8:e7:1c:f6:3c:4f:68:d0:23:a3:89:ca:f5:a1:eb:cb:db:
42:88:d3:a1:a6:21:a9:5c:04:49:bf:44:ef:a8:0e:b1:d3:e0:
3c:f0:c9:d3:ca:3e:f4:ac:8c:1d:5b:9b:6b:e2:58:4a:df:4a:
2e:56:33:19:03:90:76:b8:f0:8d:2c:75:64:10:79:9e:b8:1a:
02:e4:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:44 2025 by rpki-client