Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: Fkxf0Ofv7d+gBElLh7tpz0N/yNMnltZGmp7tFxW6zbM=
Subject key identifier: 4C:52:F1:E2:0F:B8:7F:78:2D:B6:F0:C3:EC:3D:CB:83:50:F9:C6:E6
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 0198D4A7D0B50238276956DC2E270782A0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 01D3
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: 4S8/hirtFBPNa5PX61J1fa+YgViHqPyv6u3yd6jTaJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d0:b5:02:38:27:69:56:dc:2e:27:07:82:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=4c52f1e20fb87f782db6f0c3ec3dcb8350f9c6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:1c:03:78:6a:87:6b:d5:be:c9:2b:77:b7:
73:92:ec:ef:ba:96:86:12:38:b3:83:df:75:06:7b:
2e:8a:6c:5f:8b:35:14:85:7f:3e:b2:20:fa:12:46:
7b:1c:40:40:f7:d7:34:d2:d7:02:6b:04:7c:b7:09:
97:d1:24:a9:98:73:d7:74:20:27:87:a2:79:cc:b8:
0d:d7:0f:1b:66:bb:0a:2c:74:a4:94:bb:0b:c1:6d:
66:e4:e1:e8:21:b8:f1:11:65:96:88:82:b5:75:81:
d4:04:f5:a8:80:a3:5d:14:96:6c:0d:40:37:3f:ac:
98:83:e5:4a:04:5e:80:da:73:8e:6d:3b:2b:7a:e7:
e2:77:21:26:91:ca:99:1f:dc:42:e0:06:69:10:d7:
74:54:a7:6b:14:bc:52:68:41:01:7a:6a:78:fe:d3:
89:93:b3:57:c3:72:0a:8a:17:4e:d5:63:f6:8e:c4:
92:db:a7:22:8c:3a:42:01:04:97:36:89:9a:0a:1e:
b6:e0:0d:13:ae:61:bd:59:e6:79:a2:06:f1:2c:76:
8f:55:f5:6f:aa:eb:94:b2:18:16:e4:5a:a0:26:ab:
96:66:6f:fa:89:06:fa:64:96:4c:b5:34:b1:f6:e5:
50:aa:0f:71:7f:a3:b3:f4:d7:41:fb:e6:e1:43:1d:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:F1:E2:0F:B8:7F:78:2D:B6:F0:C3:EC:3D:CB:83:50:F9:C6:E6
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:8e:c4:af:84:26:d2:67:f0:a1:36:00:a7:29:f7:ee:9d:
6d:5e:15:72:f0:54:d9:c0:12:49:6d:ea:cf:40:3f:3c:39:b2:
6f:15:76:03:53:21:f0:b6:0c:f7:55:08:f7:57:e1:77:a0:3a:
43:7c:74:f8:f0:64:b7:c1:a1:6c:c6:f4:6c:74:8a:ca:c0:de:
61:03:a9:07:5b:4b:99:de:db:6a:73:cb:e6:95:87:6a:db:87:
79:3e:fc:18:4f:ca:6d:c7:74:48:93:9f:df:6e:7f:b2:09:bc:
78:90:f2:bd:85:ee:c2:61:2b:24:c1:8e:52:6c:25:1b:24:df:
fb:e7:99:fa:b3:58:30:64:a0:40:bc:d4:0c:5e:d0:5d:22:b3:
e9:5b:b6:4c:7a:4d:9f:e1:18:c3:0e:91:2b:f9:27:9d:b2:c0:
3e:36:dc:54:f3:74:85:58:03:e9:85:e1:43:ca:03:f6:e6:d5:
bb:ee:24:42:e8:4c:d3:4b:ba:ad:ca:71:57:4e:8e:33:0f:00:
f7:43:6c:44:6f:f7:d0:7a:a7:b6:bd:a3:7f:8c:2d:2f:aa:72:
d3:dc:95:0b:83:23:6c:69:cd:84:a6:5b:64:b9:bd:83:48:cf:
e4:3a:a1:68:88:87:24:01:20:15:bb:6c:81:34:16:ac:f6:42:
0b:65:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:12 2025 by rpki-client