Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: TRH6fztn8f2aNGwURW9hJ4q4g4aKy0cvRHK+46P0QzY=
Subject key identifier: 79:18:93:8F:87:8D:4D:20:0C:FC:E7:76:26:59:CC:4F:44:B1:D1:56
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0198D73B893012C70347793617EE190DAE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0465
Signing time: Sat 23 Aug 2025 14:00:59 +0000
Manifest this update: Sat 23 Aug 2025 14:00:59 +0000
Manifest next update: Sun 24 Aug 2025 14:00:59 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: 2l9tDoyAsoCeHmzT/wjep5ojGqUL/hsXnaCJCpJ7lHg=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:89:30:12:c7:03:47:79:36:17:ee:19:0d:ae:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Aug 23 14:00:59 2025 GMT
Not After : Aug 24 14:00:59 2025 GMT
Subject: CN=7918938f878d4d200cfce7762659cc4f44b1d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:3b:28:4a:2a:f8:49:15:96:a1:f1:be:11:
32:c4:c5:d0:83:e4:bf:9d:0b:c7:f5:e1:25:0b:26:
b7:44:65:26:ef:9c:33:20:12:3e:8a:a2:9f:ce:30:
18:d1:7a:ec:34:0f:f4:14:f0:27:46:b5:bc:36:6f:
da:d8:0b:9f:31:2d:da:7f:95:dc:23:80:bd:5f:e1:
e2:73:41:01:a0:b0:12:6b:e3:d5:4d:74:d2:91:7b:
61:4f:60:3e:0d:9d:27:13:cb:f1:0c:88:a6:e9:01:
8b:7b:f8:6b:7a:57:1c:b3:70:73:d9:d0:cb:29:ed:
be:da:0d:bf:31:ec:01:22:71:9c:6a:a6:13:ef:3f:
a9:90:61:3b:c4:d2:1a:b1:8f:ae:8c:1b:f5:1c:00:
b8:be:1b:5c:87:cb:f0:73:59:5c:e1:f7:45:52:cd:
07:14:ac:96:22:e1:3a:bf:22:1a:32:5f:1b:a6:50:
d9:9d:12:81:3e:4b:74:99:03:df:be:3b:4b:6e:0e:
ca:47:e6:17:e8:4e:85:38:8a:ad:31:ee:51:65:18:
97:14:62:9f:08:66:ed:41:08:db:83:2c:4a:48:ce:
f4:5f:c8:30:0a:a5:fc:3d:42:c0:f3:db:d6:62:59:
07:2c:98:c7:b5:df:56:fe:97:9a:52:45:64:c5:3c:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:93:8F:87:8D:4D:20:0C:FC:E7:76:26:59:CC:4F:44:B1:D1:56
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:59:c2:2e:2c:88:f8:51:4a:e4:b4:e1:2c:f7:6c:61:d4:
28:7c:0d:0a:be:53:af:40:cb:a1:08:b7:79:9d:a7:a2:32:a7:
38:2b:94:a1:3d:08:2c:d5:14:22:53:44:b1:d6:07:7e:b1:ed:
31:66:a2:27:fd:f7:5f:71:05:d0:d9:46:82:3d:04:2e:b2:d4:
0f:06:36:f8:3b:35:4b:78:6c:7a:cc:33:d2:87:d3:5d:c4:dd:
4a:a6:23:18:f5:4a:d9:a6:0f:8f:8b:3d:66:37:37:26:79:f6:
7b:a6:a9:d2:b3:01:ee:75:42:1f:e6:95:c2:0f:60:86:b0:f6:
0d:02:bc:e9:2a:19:65:c2:3f:ca:30:39:4a:8b:13:e6:a8:58:
ae:1d:af:53:ba:9c:c6:de:3c:e8:50:6f:60:ea:bd:03:57:35:
e4:42:05:d3:7e:f5:5a:67:73:f7:a3:d5:e8:d1:5f:88:75:3d:
55:6c:2c:2a:29:6d:f0:02:bb:f0:bc:c2:26:49:50:04:53:7f:
89:52:2c:dd:f4:69:21:0f:8e:39:50:c7:dd:6b:9b:c0:51:d3:
9f:49:d9:12:66:49:e0:bb:2c:97:ee:00:91:3d:81:9a:da:dc:
9c:15:83:12:60:79:cc:db:c5:46:39:ca:31:51:92:ce:25:50:
b4:2d:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:37 2025 by rpki-client