Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: uqLmAZpLBPbbqTi2prJMIH9FHYYa0h+HILH6Sq3JztE=
Subject key identifier: D9:A6:84:10:5C:03:1E:10:58:0A:4D:3B:21:2F:A6:84:A3:2D:CC:21
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 0197B88EDB645111AFAA625AFAB8770681A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 032C
Signing time: Sat 28 Jun 2025 22:00:59 +0000
Manifest this update: Sat 28 Jun 2025 22:00:59 +0000
Manifest next update: Sun 29 Jun 2025 22:00:59 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: 9AmVL6wS739iYQTZDadgSNLM7wKN2BOxIRD/umdYLSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:db:64:51:11:af:aa:62:5a:fa:b8:77:06:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Jun 28 22:00:59 2025 GMT
Not After : Jun 29 22:00:59 2025 GMT
Subject: CN=d9a684105c031e10580a4d3b212fa684a32dcc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:3b:59:66:91:19:14:c0:a5:b8:64:2b:9e:
25:4f:29:cf:fa:1e:eb:4c:26:77:fd:8a:b1:08:29:
bf:07:84:79:8b:29:da:21:59:ce:cb:2c:d1:54:25:
cb:72:15:0a:86:8e:04:0e:72:85:8b:d6:12:ce:68:
5b:9d:87:41:57:c8:6b:4b:d7:b0:f6:3a:54:86:43:
d5:90:85:dc:d5:a2:1e:83:25:68:31:19:06:79:39:
ad:91:4f:9d:9a:df:d1:c2:0b:04:38:d1:f8:d7:f2:
e6:44:1c:ae:ac:19:9a:b3:97:23:0b:62:02:ac:b0:
9a:b2:d8:e1:0c:59:dd:67:77:3a:ff:32:3f:76:b4:
1a:10:61:0e:3c:9f:65:98:d7:ce:c2:fb:6e:0a:4b:
7c:9f:f2:34:9d:9f:a3:84:82:0b:a8:5d:6b:77:d5:
d3:0e:8d:13:57:50:e1:1f:e9:28:67:bb:2f:9a:04:
fd:98:71:24:4b:63:55:c7:30:47:8f:7a:6a:c5:03:
5e:0e:2d:cc:b9:6c:09:0b:4c:da:33:df:49:a6:94:
33:63:b9:e0:2d:09:a5:5b:e1:27:31:b7:dc:13:04:
01:09:5e:d7:bf:2c:4b:e5:2b:d7:09:7d:1a:b7:fc:
10:c2:ee:35:75:5d:e6:ac:42:c6:50:43:71:27:2f:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:84:10:5C:03:1E:10:58:0A:4D:3B:21:2F:A6:84:A3:2D:CC:21
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fa:c9:5c:40:16:29:e1:b5:32:47:60:ad:03:15:1a:ed:7b:
03:db:5d:b2:73:15:51:34:ef:bc:42:2c:b6:7f:c1:dd:e2:96:
b9:bb:fe:09:85:81:27:51:0a:45:ce:3d:47:b6:4e:f0:4a:aa:
a7:c8:05:85:9b:48:b7:73:97:cb:ea:ab:c0:c1:09:5a:fb:a8:
0e:19:26:a0:4c:ce:bd:90:7b:30:2c:d6:de:eb:4f:7a:ec:d4:
31:d9:81:6b:da:64:88:05:8a:e6:71:c0:7e:1a:6a:81:3a:37:
9c:60:02:e3:6d:e0:ce:ee:3c:d5:72:c8:08:87:14:3d:22:94:
8c:da:2c:e6:4c:0a:1b:bb:c9:34:cf:ba:0b:8e:30:5c:02:d0:
92:8a:2d:93:57:7a:af:c8:56:dc:ab:19:8e:48:68:eb:fe:bd:
1e:58:f8:2d:02:74:56:d6:ec:80:62:ca:5a:9f:27:c1:39:65:
e2:6a:8d:7c:e4:4b:6f:a6:81:b3:b9:8b:29:9a:0a:dd:f7:1b:
69:6c:ea:c7:f2:b7:78:8d:7a:98:33:58:a1:07:d2:a1:be:7f:
4a:ab:91:bb:85:09:e4:d5:6f:81:a0:20:dc:2d:8c:d0:88:ae:
e7:e2:09:f5:f4:4a:bd:4a:e0:fa:f6:8f:51:6f:8e:e4:69:0c:
b0:3b:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:06:40 2025 by rpki-client