Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
File: dHnfUKMVAp6AqhlHr-EtselIYos.mft (raw, json)
Hash identifier: 4LmKD5K/7R/+75BAPDKDmQoQQC2WpgVa27BoLyQ3k38=
Subject key identifier: EB:17:C7:5A:F3:B0:CC:D9:BE:84:0B:1C:42:2F:9F:85:02:62:53:D9
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 0198D5BB7A28986C11ADBCFF9F2B58D0BD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
Manifest number: 0F4D
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: KvOchdw6AYfLt261W6RR4KIthYY.roa (hash: WXdEqSkBC/gQsasA/7q/ZdUFdpwAbrzjieJX5Z97f4U=)
2: dHnfUKMVAp6AqhlHr-EtselIYos.crl (hash: AirpZVf/uX/q1TRvaRd6fKRiPWmi1vWsj6RtkdvEAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7a:28:98:6c:11:ad:bc:ff:9f:2b:58:d0:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=eb17c75af3b0ccd9be840b1c422f9f85026253d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:89:36:85:e1:d6:ee:cd:25:24:f9:fe:f7:
1a:11:6a:71:60:74:82:af:26:da:1d:91:16:6e:47:
f9:6d:fd:e0:fe:db:59:09:2a:e8:58:50:c8:1a:d2:
eb:a1:28:a9:bd:51:54:28:5e:43:b1:c6:04:3f:78:
d1:d0:fa:87:d3:fa:b2:c6:ba:ba:bf:da:42:f2:8f:
11:28:0a:1a:f7:7b:83:0b:02:4e:f3:1f:d1:f6:36:
fc:be:33:10:b6:e3:b1:f3:29:df:6b:cb:dc:1f:c8:
02:a6:51:8f:19:6b:81:f8:47:30:49:fd:38:d3:fd:
2a:3c:26:1d:38:24:f6:bc:d2:c5:ec:d5:90:5f:b0:
2f:1a:a7:fe:41:66:24:67:b6:8e:ec:5c:62:69:47:
29:87:0b:59:3c:2f:d5:95:37:a7:22:31:9d:4a:51:
92:15:91:e0:bf:3c:fa:b5:03:ee:6d:62:0e:59:3c:
1f:09:64:51:1b:42:ce:3f:4e:cb:ac:08:52:85:a9:
5f:24:54:2f:4e:77:c6:ef:4a:2b:29:6c:70:15:af:
80:9b:39:83:84:f5:09:5d:73:ae:c3:a5:70:be:33:
b9:dd:a5:2e:9d:89:01:d7:1c:13:68:e3:7f:8d:35:
14:a9:85:43:5c:5b:a5:bc:b5:98:0f:02:47:d4:3f:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:C7:5A:F3:B0:CC:D9:BE:84:0B:1C:42:2F:9F:85:02:62:53:D9
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3c:a4:83:e7:bb:8a:d8:31:b0:23:06:07:c5:46:b7:ec:8c:
60:cc:09:88:7c:52:e6:03:16:88:6d:b5:f5:2d:db:dd:28:1b:
ce:e2:7f:34:f5:08:45:04:25:13:be:13:11:56:c8:29:07:30:
c8:e4:3c:f9:52:b4:8d:56:c7:cf:4b:89:f4:8c:a3:a2:65:ba:
9b:e3:c7:7c:76:c4:85:53:11:86:68:1a:8c:9e:d9:5a:7b:98:
95:e4:e9:65:45:17:51:d3:fd:60:a7:36:b6:26:7c:73:55:b6:
71:81:77:6a:c7:19:a7:cf:54:31:fc:1e:9b:16:3a:9a:21:b7:
ec:34:ac:6d:78:6c:e9:77:09:6c:2d:6b:8a:cc:f5:47:ab:20:
be:2d:48:03:19:19:59:1e:62:ef:43:37:0c:91:a0:7e:26:e2:
b2:50:fa:84:ae:75:0e:60:62:ff:0d:52:4d:5b:0e:81:1d:10:
28:39:63:48:d2:42:d4:11:b7:a3:a7:3c:c8:ef:b4:85:b8:43:
87:a9:42:d0:76:83:82:63:ce:ed:3c:0f:fc:3b:96:5f:50:28:
da:e3:1d:f6:d3:d1:a2:cf:5b:a3:7f:ac:21:76:57:ad:c0:28:
ee:dd:27:38:3d:a3:d6:cf:03:12:bd:da:95:61:67:f8:6e:88:
a2:72:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:49 2025 by rpki-client