Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
File: dHnfUKMVAp6AqhlHr-EtselIYos.mft (raw, json)
Hash identifier: inY6lG/xfcYEjwsgaKV4H9tV8ML9qREVXy8tCZSv+Q0=
Subject key identifier: A1:CA:39:9C:49:2B:F2:C4:FF:4D:15:FC:A1:6C:EE:36:D9:6C:5D:93
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 0197C94B9F9A632A1875E42CE91BFD8E740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
Manifest number: 0EC2
Signing time: Wed 02 Jul 2025 04:01:05 +0000
Manifest this update: Wed 02 Jul 2025 04:01:05 +0000
Manifest next update: Thu 03 Jul 2025 04:01:05 +0000
Files and hashes: 1: KvOchdw6AYfLt261W6RR4KIthYY.roa (hash: WXdEqSkBC/gQsasA/7q/ZdUFdpwAbrzjieJX5Z97f4U=)
2: dHnfUKMVAp6AqhlHr-EtselIYos.crl (hash: 9MRuLpvvHTwqISfw2CdGC85BEy3nvEelz3RFIrEJIMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:9f:9a:63:2a:18:75:e4:2c:e9:1b:fd:8e:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Jul 2 04:01:05 2025 GMT
Not After : Jul 3 04:01:05 2025 GMT
Subject: CN=a1ca399c492bf2c4ff4d15fca16cee36d96c5d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:af:cd:f0:65:ee:8e:c1:3b:00:94:d2:53:c6:
9b:43:a7:8e:33:98:d5:33:96:c4:26:8b:c8:05:4b:
87:d4:c1:1f:a0:54:ef:ad:f4:22:bd:dd:a4:26:25:
29:8d:88:6d:7b:1a:6f:c5:d2:0b:e8:8b:77:b9:da:
37:4b:75:27:41:09:43:9b:d0:4b:5d:1d:87:8e:30:
25:88:39:24:5e:5c:2f:37:ce:f1:89:10:d3:b7:0b:
46:c8:0e:f8:7a:82:ea:ca:b5:b8:41:1c:e4:28:40:
3e:d6:d7:19:53:c3:ec:74:4d:1c:ae:d1:b0:9e:f0:
18:e7:76:93:43:bd:49:9d:f8:a1:43:70:bc:75:3e:
64:e5:c3:1c:13:c4:e3:28:26:3d:83:e0:ea:52:97:
99:3d:7a:e8:eb:d2:50:b4:45:43:85:64:af:a8:0f:
6f:05:18:d4:0f:b3:b3:b0:b5:b7:6d:a0:40:9f:89:
76:af:38:9a:30:85:04:24:df:61:5e:57:61:bd:64:
f4:2e:f9:d9:7c:9a:49:0a:c9:a9:32:2f:95:11:8f:
80:5e:e9:fb:dd:d4:74:72:ac:b7:64:6a:49:77:d5:
a9:9c:fa:19:08:38:29:2b:6d:46:98:a0:87:20:2e:
9b:1d:d1:3e:67:68:f9:b3:3f:aa:08:f3:d2:5b:79:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:39:9C:49:2B:F2:C4:FF:4D:15:FC:A1:6C:EE:36:D9:6C:5D:93
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:cb:63:d3:9f:1a:ed:54:a1:20:e0:5d:1c:cf:b9:9f:ad:
6b:76:4c:4b:eb:0f:7d:ce:d7:52:70:4d:6f:a9:6a:a1:d5:64:
15:bf:92:09:9d:3f:a9:6f:37:6b:18:de:14:d3:07:d0:ea:c1:
30:b4:0a:ba:0b:71:19:90:2d:84:9f:5b:ac:53:c7:46:cd:ae:
75:bc:2e:42:4a:c8:dc:82:86:f5:27:4d:8e:f4:c8:96:2a:e6:
fa:04:53:a7:4e:5a:71:5c:ca:fb:22:1d:84:3e:39:ef:33:82:
86:b9:14:ee:12:94:9c:b6:0d:31:9b:4b:fc:a1:c8:33:b0:b8:
28:6b:c3:53:9e:62:c6:a9:31:25:d2:22:03:8f:33:62:b9:42:
c2:90:58:84:83:10:7c:9b:03:18:cc:52:09:fd:cc:47:0d:b3:
4c:27:a8:50:c3:9e:f5:09:ff:70:34:8f:0a:2a:4a:4d:70:44:
14:00:7b:39:9a:ae:63:37:b9:19:ee:10:d0:7f:16:7f:d5:7b:
ba:3f:3b:e5:c5:3c:20:09:22:68:a7:eb:62:2f:79:83:08:0e:
38:7e:cd:f8:2d:41:fd:e0:59:80:01:52:f3:35:a3:dd:a2:b7:
b2:a6:e6:9e:5f:3d:93:2a:69:ee:47:6f:40:cb:a6:c6:ba:9c:
77:3e:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:17:35 2025 by rpki-client