Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: rZVdIh14XjkCW637z4rdvYgiDG+e7XJCHckCgnoK5WY=
Subject key identifier: 3A:43:43:AF:1F:A1:74:A2:02:2C:5A:BD:DE:C7:E1:AE:5D:ED:81:63
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0197B82148929E8E570BD61F049273E879A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 107F
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: CwOPYiDD7P0aHxr5JJ+wpdnSUxCgC0LCBZrigj5BdpA=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:48:92:9e:8e:57:0b:d6:1f:04:92:73:e8:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=3a4343af1fa174a2022c5abddec7e1ae5ded8163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:b1:6f:2b:ef:95:b2:9a:9b:cc:b8:a8:d9:
f6:32:eb:31:d0:8e:74:a9:c2:d2:0d:4c:62:8b:7e:
f2:28:63:fe:e8:a1:7f:04:01:2e:b4:49:a5:ac:e5:
c9:25:14:71:37:f4:c1:4f:d7:76:c4:fd:fd:c5:23:
21:32:cc:b8:7e:82:23:6e:fe:2e:fb:ca:95:e5:ea:
fb:f8:50:6c:37:ed:97:b8:39:5d:14:38:6c:09:94:
33:69:9c:0f:86:a9:ef:e7:20:9c:10:54:2e:d8:8f:
d4:c5:8a:76:56:58:d8:38:f5:9c:8b:2c:e4:3d:54:
44:57:dc:b6:a5:04:8d:d6:64:51:50:6b:29:30:0b:
55:48:08:0f:ce:72:1a:c2:06:6b:4c:67:d2:9d:3c:
e9:ff:42:ab:a7:89:b7:fa:a5:a1:7b:e6:b9:e6:53:
31:3e:9b:1a:eb:eb:af:7f:74:ba:f4:54:6a:3c:53:
0e:d3:b0:b2:2a:ef:c7:85:a7:5b:4e:b4:cc:61:29:
a8:ec:25:b9:97:26:e6:f2:bd:af:f2:05:68:ee:b5:
39:29:64:54:1a:6e:70:8e:6d:5e:24:2b:a6:b2:36:
14:a2:0c:cf:0e:fa:bf:32:cc:16:8b:2f:64:52:4d:
bf:4b:78:45:e3:a0:2e:32:17:c7:77:14:f7:8e:95:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:43:AF:1F:A1:74:A2:02:2C:5A:BD:DE:C7:E1:AE:5D:ED:81:63
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b3:d4:19:33:f2:09:09:0a:49:2e:93:71:21:ed:f5:78:a4:
9f:13:b1:a5:7f:a2:2a:fb:cc:7b:bf:8f:61:08:5e:db:5d:1c:
43:d4:67:07:d2:92:ed:8f:87:ba:45:f0:c9:38:e5:08:a9:fd:
70:de:e3:f4:2d:dd:63:a9:96:cd:86:17:40:91:64:b3:50:83:
eb:c9:8f:c1:45:bd:a2:21:15:5c:aa:0a:48:30:10:1a:10:7c:
eb:06:7f:c9:e5:05:a7:91:68:7c:1b:6c:1e:c6:ff:c5:20:64:
4e:b3:ee:e5:69:fc:fc:14:2c:82:8d:0f:14:63:15:62:df:7b:
0c:9a:73:26:0b:67:68:00:b5:d9:42:bc:1e:b8:43:2b:74:fa:
a1:9b:43:7f:cc:9b:02:d1:40:57:b9:c5:3a:69:48:4e:32:3e:
8f:43:7b:17:45:b3:de:cb:6d:d4:1d:0e:33:90:4b:e2:f1:66:
c1:4d:c7:1e:1e:21:0e:2c:36:d1:1d:84:3c:31:0b:d2:07:67:
d6:63:90:4b:68:08:29:a4:d8:04:88:ad:61:07:00:38:a0:c2:
0a:ef:bd:aa:ee:9e:b7:e7:e7:7e:0b:5d:15:a8:4b:00:b7:2b:
30:ee:ea:87:8f:55:41:c7:55:28:7b:60:a8:d3:23:72:d9:db:
27:c2:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client